Thème WordPress
Vulnérabilités Avada | Website Builder For WordPress & WooCommerce, page 2
Cette page rassemble les failles publiées pour Avada | Website Builder For WordPress & WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Avada | Website Builder For WordPress & WooCommerce
23 fiches
Avada <= 6.2.2 – Authenticated (Contributor+) Cross-Site Scripting
The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up to, and including, 6.2.3 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers, and…
[*, 6.2.3)
6.2.3
24/04/2020
Avada <= 5.1.4 – Cross-Site Request Forgery
The Avada theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.4. This is due to missing nonce validation on the fusion_builder_importer() function. This makes it possible for unauthenticated attackers to trigger…
[*, 5.1.5)
5.1.5
26/04/2017
Avada <= 5.1.4 – Stored Cross-Site Scripting
The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via avada_portfolio_category_slug parameter saved by the save_permalink_settings() function called via 'admin_init' in versions up to 5.1.5 due to insufficient input sanitization and output escaping. This makes it…
[*, 5.1.5)
5.1.5
26/04/2017
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.