Themefusion

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 20
    Known Exploited: 0
    4
    Critical Level Threats
    5
    High Level Threats
    11
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-115346

    Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field

    Last Modified: Oct 31, 2026
    Published: Oct 30, 2026

    CVE-2026-97340

    Avada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'author_facebook' User Profile Field

    Last Modified: Oct 19, 2026
    Published: Oct 10, 2026

    CVE-2026-84925

    Avada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Reflected Cross-Site Scripting via 'lang' Parameter

    Last Modified: Oct 04, 2026
    Published: Oct 02, 2026

    CVE-2026-16654

    Avada (Fusion) Builder <= 3.15.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode Attribute

    Last Modified: Sep 01, 2026
    Published: Aug 28, 2026

    CVE-2026-18431

    Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

    Last Modified: Sep 01, 2026
    Published: Aug 26, 2026
    Items Per Page