Sensitive Information Exposure in Avada Theme for WordPress

CVE-2024-2340

Summary

The Avada theme for WordPress contains a vulnerability that enables unauthenticated attackers to access sensitive information through the '/wp-content/uploads/fusion-forms/' directory. This flaw permits unauthorized extraction of files submitted via forms created using the Avada theme, potentially leading to data breaches and compromised privacy. All versions up to and including 7.11.6 are affected, highlighting the need for immediate updates and security measures to protect user data.

References