Medium
CVE-2026-32452
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 59
Reset filters
Medium
CVE-2026-25472
Avada (Fusion) Builder <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49940
Fusion Builder <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64634
Avada <= 7.13.2 - Missing Authorization
Medium
CVE-2025-6747
Avada (Fusion) Builder <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-1665
Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-13345
Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2024-13346
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-24748
Avada <= 7.11.10 - Missing Authorization
Medium
CVE-2024-12477
Avada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
Medium
CVE-2024-12335
Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure
Medium
CVE-2024-54357
Avada <= 7.11.10 - Cross-Site Request Forgery
Medium
CVE-2024-5628
Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
Medium
CVE-2024-43351
Bravada <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2311
Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-2344
Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
Medium
CVE-2024-2340
Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
Medium
CVE-2024-2343
Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action
Medium
CVE-2024-1668
Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entries
High
CVE-2024-1468
Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2023-39312
Avada <= 7.11.1 - Authenticated(Author+) Arbitrary File Upload via Zip Extraction
Medium
CVE-2023-39922
Avada <= 7.11.1 - Missing Authorization
Medium
CVE-2023-39306
Fusion Builder <= 3.11.1 - Reflected Cross-Site Scripting via User Register Element
High
CVE-2023-39307
Avada <= 7.11.1 - Authenticated(Contributor+) Arbitrary File Upload via 'ajax_import_options'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.