Vulnerabilidades em ThemeFusion

49 resultados
Análise Vexday

ThemeFusion registra 32 vulnerabilidades conhecidas sem incidentes de exploração ativa reportada, reduzindo o risco imediato. A fraqueza dominante é controle de acesso inadequado (CWE-862), com apenas 2 vulnerabilidades críticas, sugerindo um perfil de risco moderado. O volume recente de 5 CVEs em 90 dias indica atividade contínua de descoberta, mantendo o monitoramento necessário.

CVE-2024-54357MEDIUMWordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-32452MEDIUMWordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32453MEDIUMWordPress Avada Core plugin < 5.15.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-16654MEDIUMAvada (Fusion) Builder <= 3.15.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode AttributeEPSS 0.2%CVE-2026-32451MEDIUMWordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32542HIGHWordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-25472MEDIUMWordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-32454MEDIUMWordPress Avada Core plugin < 5.15.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-58922MEDIUMWordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%