← All advisories

Critical severity9.1NVD Advisory· Published Jun 19, 2024· Updated Jun 17, 2026

CVE-2023-39312

CVE-2023-39312

Description

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Affected products

3

Theme Fusion/Avada2 versions
cpe:2.3:a:theme-fusion:avada:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:theme-fusion:avada:*:*:*:*:*:wordpress:*:*range: <7.11.2
- (no CPE)range: n/a
WordPress/Avadallm-fuzzy
Range: <=7.11.1

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/avada/wordpress-avada-theme-7-11-1-authenticated-author-unrestricted-zip-extraction-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.