← All advisories

High severity8.5NVD Advisory· Published Mar 26, 2024· Updated Apr 28, 2026

CVE-2023-39307

CVE-2023-39307

Description

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Affected products

1

Theme Fusion/Avada
cpe:2.3:a:theme-fusion:avada:*:*:*:*:*:wordpress:*:*
Range: <7.11.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/avada/wordpress-avada-theme-7-11-1-authenticated-arbitrary-file-upload-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.