CVE-2024-12335

creationtimestamp| type| source ---|---|--- 2024-12-25 06:45:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113712111301836978 2024-12-25 07:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le4fznovsq2c 2024-12-25 08:47:50+00:00| seen|...

CVE-2024-12335 Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure

The Avada Fusion Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handleclonepost function and the 'fusionblog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for...

CVE-2024-12335 Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure

The Avada Fusion Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handleclonepost function and the 'fusionblog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for...

CVE-2024-12335

CVE-2024-12335 concerns the Avada (Fusion) Builder for WordPress. The issue allows information disclosure via handle_clone_post and the fusion_blog shortcode, due to insufficient restrictions on which posts can be included. Affected versions are all up to and including 3.11.12. The vulnerability ...