[ Vendor · 4 CVEs ]
ThemeFusion
CVEs affecting ThemeFusion published in the last 30 days, plus any ThemeFusion CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97471 | 14 Oct 2026 | CVSS 5.3 | themefusion Avada (Fusion) BuilderThe Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the… | |
| CVE-2026-97340 | 10 Oct 2026 | CVSS 6.4 | ThemeFusion Avada | Website Builder For WordPress & WooCommerceThe Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author… | |
| CVE-2026-97670 | 10 Oct 2026 | CVSS 9.1 | themefusion Avada (Fusion) BuilderThe Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to… | |
| CVE-2026-84925 | 2 Oct 2026 | CVSS 6.1 | ThemeFusion Avada | Website Builder For WordPress & WooCommerceThe Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter… |