CVE-2023-39311: WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability
Published Mar 27, 2024
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.
Affected Software
3 affected components
ThemeFusion Fusion Builder>n/a, <=3.11.1
WordPress Avada Builder<=3.11.1
Avada Fusion Builder Wordpress<=3.11.1
Remediation
Information
Update to 3.11.2 or a higher version.
Event History
Mar 27, 2024
CVE Published
via MITRE·01:29 PM
Data Sourced
via MITRE·01:29 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-39311?
CVE-2023-39311 is classified as a Cross-Site Request Forgery (CSRF) vulnerability which can have significant security implications.
2
How do I fix CVE-2023-39311?
To fix CVE-2023-39311, update the ThemeFusion Fusion Builder to version 3.11.2 or later.
3
Which versions of Fusion Builder are affected by CVE-2023-39311?
CVE-2023-39311 affects Fusion Builder versions n/a through 3.11.1.
4
Is the WordPress Avada Builder also affected by CVE-2023-39311?
Yes, the WordPress Avada Builder is affected up to version 3.11.1.
5
What type of vulnerability is CVE-2023-39311?
CVE-2023-39311 is a Cross-Site Request Forgery (CSRF) vulnerability.