Vulnerabilidades em themefusion

55 resultados
Análise Vexday

A themefusion possui 14 vulnerabilidades catalogadas, com 6 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Embora nenhuma esteja sob exploração ativa conhecida (KEV), 2 falhas críticas e a predominância de XSS (CWE-79) representam risco significativo para aplicações web que utilizam seus produtos. A cadência de divulgações recentes sugere necessidade de monitoramento contínuo e aplicação ágil de patches.

CVE-2025-64634MEDIUMWordPress Avada theme <= 7.13.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-12477MEDIUMAvada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple WidgetsEPSS 0.2%CVE-2025-49940MEDIUMWordPress Fusion Builder plugin <= 3.13.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-6747MEDIUMAvada (Fusion) Builder <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2026-32452MEDIUMWordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-54357MEDIUMWordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-32453MEDIUMWordPress Avada Core plugin < 5.15.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-84925MEDIUMAvada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Reflected Cross-Site Scripting via 'lang' ParameterEPSS 0.2%CVE-2026-32451MEDIUMWordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-104729MEDIUMAvada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode AttributesEPSS 0.2%CVE-2026-25472MEDIUMWordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97340MEDIUMAvada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'author_facebook' User Profile FieldEPSS 0.2%CVE-2026-32542HIGHWordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-32454MEDIUMWordPress Avada Core plugin < 5.15.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-58922MEDIUMWordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%