CVE-2024-13345

CVE-2024-13345 : Avada Builder (WordPress) <= 3.11.13 is vulnerable to unauthenticated arbitrary shortcode execution due to improper validation before do_shortcode, enabling arbitrary shortcode execution. Affected: Avada Builder/ Fusion Builder (WordPress plugin). Impact: arbitrary code execut...

CVE-2024-13345 Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...