WordPress Avada (fusion) Builder Vulnerabilities

Wordpress Avada (fusion) Builder vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

13 May 2026

Arbitrary File Read Vulnerability in Avada Builder for WordPress
CVE-2026-4782
WordPressAvada (fusion) Builder6.5MEDIUM
SQL Injection Vulnerability in Avada Builder Plugin for WordPress
CVE-2026-4798
WordPressAvada (fusion) Builder7.5HIGH

15 April 2026

Arbitrary Action Execution Vulnerability in Avada Builder Plugin for WordPress
CVE-2026-1509
WordPressAvada (fusion) Builder5.4MEDIUM
Sensitive Information Exposure in Avada Builder Plugin for WordPress
CVE-2026-1541
WordPressAvada (fusion) Builder4.3MEDIUM

16 July 2025

Stored Cross-Site Scripting Vulnerability in Avada Builder Plugin for WordPress
CVE-2025-6747
WordPressAvada (fusion) Builder6.4MEDIUM

1 April 2025

Stored Cross-Site Scripting in Avada Builder Plugin for WordPress
CVE-2025-1665
WordPressAvada (fusion) Builder6.4MEDIUM

13 February 2025

Arbitrary Shortcode Execution in Avada Builder Plugin for WordPress
CVE-2024-13345
WordPressAvada (fusion) Builder7.3HIGH

22 January 2025

Stored Cross-Site Scripting Vulnerability in Avada Builder Plugin for WordPress
CVE-2024-12477
WordPressAvada (fusion) Builder6.4MEDIUM

25 December 2024

Information Exposure Vulnerability in Avada Builder Plugin for WordPress
CVE-2024-12335
WordPressAvada (fusion) Builder4.3MEDIUM

13 September 2024

Stored Cross-Site Scripting Vulnerability Affects Avada Website Builder
CVE-2024-5628
WordPressAvada (fusion) Builder6.4MEDIUM