theme-fusion kayıtları

theme-fusion üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %34,8
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

23 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
60Bu hafta	CVE-2022-1386Kavram kanıtı	Fusion Builder < 3.6.2 - Unauthenticated SSRFfusion builder project · fusion builder · CWE-918 Kimlik doğrulamasız SSRF	Kritik9,8	—	%71,4	16 May 2022
40Planlayın	CVE-2024-13346Kavram kanıtı	Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Executiontheme-fusion · avada · CWE-94 Girişsiz RCE	Kritik9,8	—	%2,2	13 Şub 2025
39İzleyin	CVE-2024-13345İstismar yok	Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Executiontheme-fusion · avada builder · CWE-94 Girişsiz RCE	Kritik9,8	—	%0,5	13 Şub 2025
35İzleyin	CVE-2024-1468İstismar yok	Avada \| Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Uploadtheme-fusion · avada · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%1,1	29 Şub 2024
35İzleyin	CVE-2023-39307İstismar yok	WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerabilitytheme-fusion · avada · CWE-434 Dosya yükleme	Yüksek8,8	—	%0,6	26 Mar 2024
35İzleyin	CVE-2017-18607İstismar yok	The avada theme before 5.1.5 for WordPress has CSRF.theme-fusion · avada · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,6	10 Eyl 2019
35İzleyin	CVE-2022-41996İstismar yok	WordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerabilitytheme-fusion · avada · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,5	27 Eki 2022
35İzleyin	CVE-2023-39312İstismar yok	WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerabilitytheme-fusion · avada · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,5	19 Haz 2024
35İzleyin	CVE-2023-39922İstismar yok	WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerabilitytheme-fusion · avada · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,3	19 Haz 2024
30İzleyin	CVE-2023-39313İstismar yok	WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerabilitytheme-fusion · avada · CWE-918 SSRF	Yüksek7,7	—	%0,5	28 Mar 2024
29İzleyin	CVE-2024-2340Kavram kanıtı	Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listingtheme-fusion · avada · CWE-548 Kimlik doğrulamasız	Orta5,3	—	%27,9	9 Nis 2024
28İzleyin	CVE-2024-2344İstismar yok	Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entrytheme-fusion · avada · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,8	9 Nis 2024
26İzleyin	CVE-2024-1668İstismar yok	Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entriestheme-fusion · avada · CWE-284 Erişim denetimi (IDOR)	Orta6,5	—	%0,6	13 Mar 2024
25İzleyin	CVE-2024-2343İstismar yok	Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_actiontheme-fusion · avada · CWE-918 SSRF	Orta6,4	—	%0,5	9 Nis 2024
24İzleyin	CVE-2017-18606İstismar yok	The avada theme before 5.1.5 for WordPress has stored XSS.theme-fusion · avada · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	10 Eyl 2019
21İzleyin	CVE-2024-2311İstismar yok	Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodetheme-fusion · avada · CWE-79 XSS	Orta5,4	—	%0,6	9 Nis 2024
21İzleyin	CVE-2020-36711İstismar yok	Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scriptingtheme-fusion · avada · CWE-79 XSS	Orta5,4	—	%0,6	6 Haz 2023
21İzleyin	CVE-2024-5628İstismar yok	Avada \| Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcodetheme-fusion · avada · CWE-79 XSS	Orta5,4	—	%0,3	13 Eyl 2024
21İzleyin	CVE-2025-1665İstismar yok	Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scriptingtheme-fusion · avada builder · CWE-79 XSS	Orta5,4	—	%0,2	1 Nis 2025
21İzleyin	CVE-2025-64634İstismar yok	WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerabilitytheme-fusion · avada · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,2	16 Ara 2025
21İzleyin	CVE-2024-12477İstismar yok	Avada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgetstheme-fusion · avada builder · CWE-79 XSS	Orta5,4	—	%0,2	22 Oca 2025
17İzleyin	CVE-2024-12335İstismar yok	Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosuretheme-fusion · avada builder · CWE-639 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	25 Ara 2024
17İzleyin	CVE-2024-54357İstismar yok	WordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerabilitytheme-fusion · avada · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,1	16 Ara 2024

CVE-2022-1386
60Bu hafta
Fusion Builder < 3.6.2 - Unauthenticated SSRF
KritikCVSS 9,8Kavram kanıtıEPSS %71
- Kimlik doğrulamasız
- SSRF
fusion builder project · fusion builder16 May 2022
CVE-2024-13346
40Planlayın
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
KritikCVSS 9,8Kavram kanıtıEPSS %2
- Girişsiz RCE
theme-fusion · avada13 Şub 2025
CVE-2024-13345
39İzleyin
Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
theme-fusion · avada builder13 Şub 2025
CVE-2024-1468
35İzleyin
Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Dosya yükleme
theme-fusion · avada29 Şub 2024
CVE-2023-39307
35İzleyin
WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Dosya yükleme
theme-fusion · avada26 Mar 2024
CVE-2017-18607
35İzleyin
The avada theme before 5.1.5 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
theme-fusion · avada10 Eyl 2019
CVE-2022-41996
35İzleyin
WordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
theme-fusion · avada27 Eki 2022
CVE-2023-39312
35İzleyin
WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
theme-fusion · avada19 Haz 2024
CVE-2023-39922
35İzleyin
WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
theme-fusion · avada19 Haz 2024
CVE-2023-39313
30İzleyin
WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0
- SSRF
theme-fusion · avada28 Mar 2024
CVE-2024-2340
29İzleyin
Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
OrtaCVSS 5,3Kavram kanıtıEPSS %27
- Kimlik doğrulamasız
theme-fusion · avada9 Nis 2024
CVE-2024-2344
28İzleyin
Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
theme-fusion · avada9 Nis 2024
CVE-2024-1668
26İzleyin
Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entries
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
theme-fusion · avada13 Mar 2024
CVE-2024-2343
25İzleyin
Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action
OrtaCVSS 6,4İstismar yokEPSS %0
- SSRF
theme-fusion · avada9 Nis 2024
CVE-2017-18606
24İzleyin
The avada theme before 5.1.5 for WordPress has stored XSS.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
theme-fusion · avada10 Eyl 2019
CVE-2024-2311
21İzleyin
Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
theme-fusion · avada9 Nis 2024
CVE-2020-36711
21İzleyin
Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
theme-fusion · avada6 Haz 2023
CVE-2024-5628
21İzleyin
Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
theme-fusion · avada13 Eyl 2024
CVE-2025-1665
21İzleyin
Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
theme-fusion · avada builder1 Nis 2025
CVE-2025-64634
21İzleyin
WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
theme-fusion · avada16 Ara 2025
CVE-2024-12477
21İzleyin
Avada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
theme-fusion · avada builder22 Oca 2025
CVE-2024-12335
17İzleyin
Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
theme-fusion · avada builder25 Ara 2024
CVE-2024-54357
17İzleyin
WordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
theme-fusion · avada16 Ara 2024