agentprime: themefusion-avada-website-builder-for-wordpress-woocommerceEvery new CVE for themefusion-avada-website-builder-for-wordpress-woocommerce.https://agentprime.io/CVE-2026-115346: Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Fieldhttps://agentprime.io/advisories/CVE-2026-115346/https://agentprime.io/advisories/CVE-2026-115346/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:15:31 GMTCVECVE-2026-97340: Avada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'author_facebook' User Profile Fieldhttps://agentprime.io/advisories/CVE-2026-97340/https://agentprime.io/advisories/CVE-2026-97340/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 07:41:48 GMTCVECVE-2026-84925: Avada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Reflected Cross-Site Scripting via 'lang' Parameterhttps://agentprime.io/advisories/CVE-2026-84925/https://agentprime.io/advisories/CVE-2026-84925/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 05:30:15 GMTCVECVE-2026-18431: Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Writehttps://agentprime.io/advisories/CVE-2026-18431/https://agentprime.io/advisories/CVE-2026-18431/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 06:08:28 GMTCVEcriticalCVE-2024-13346: Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2024-13346/https://agentprime.io/advisories/CVE-2024-13346/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Feb 2025 06:58:04 GMTCVECVE-2024-2311: Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2024-2311/https://agentprime.io/advisories/CVE-2024-2311/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:36 GMTCVECVE-2024-2344: Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entryhttps://agentprime.io/advisories/CVE-2024-2344/https://agentprime.io/advisories/CVE-2024-2344/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:22 GMTCVECVE-2024-2340: Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listinghttps://agentprime.io/advisories/CVE-2024-2340/https://agentprime.io/advisories/CVE-2024-2340/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:06 GMTCVECVE-2024-2343: Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_actionhttps://agentprime.io/advisories/CVE-2024-2343/https://agentprime.io/advisories/CVE-2024-2343/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:03 GMTCVECVE-2024-1668: Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entrieshttps://agentprime.io/advisories/CVE-2024-1668/https://agentprime.io/advisories/CVE-2024-1668/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:32:40 GMTCVECVE-2024-1468: Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2024-1468/https://agentprime.io/advisories/CVE-2024-1468/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Feb 2024 03:30:29 GMTCVECVE-2020-36711: Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2020-36711/https://agentprime.io/advisories/CVE-2020-36711/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jun 2023 01:51:24 GMTCVE