Theme Fusion

theme-fusion

23 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (23)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-1386 2Fusion Builder Project Theme Fusion 2Avada Fusion Builder Jun 17, 2026 May 16, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in t...Show more The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the server's local network bypassing firewalls and access control measures.Show less
CVE-2017-18607 1Theme Fusion 1Avada Nov 21, 2024 Sep 10, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The avada theme before 5.1.5 for WordPress has CSRF.
CVE-2017-18606 1Theme Fusion 1Avada Nov 21, 2024 Sep 10, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The avada theme before 5.1.5 for WordPress has stored XSS.