themefusion
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 34 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 26, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Avada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Reflected Cross-Site Scripting via 'lang' Parameter
Critical Avada WordPress theme flaw enables zero-click RCE
Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value
WordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability
WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability
WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability
Avada (Fusion) Builder <= 3.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Shortcodes
Avada Builder <= 3.15.2 - Authenticated (Subscriber+) Arbitrary File Read via 'custom_svg' Shortcode Parameter
Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter
WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability
Monitor themefusion in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.