How many ThemeFusion avada builder CVEs are in CISA KEV?

None of ThemeFusion avada builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ThemeFusion avada builder are affected?

5 distinct ThemeFusion avada builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ThemeFusion avada builder CVEs?

ThemeFusion avada builder's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical ThemeFusion avada builder vulnerabilities are there?

ThemeFusion avada builder has 1 critical and 0 high-severity CVEs.

What is the average severity of ThemeFusion avada builder CVEs?

The average CVSS base score across ThemeFusion avada builder's scored CVEs is 6.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

ThemeFusion

4 CVEs

ThemeFusion avada builder Vulnerabilities

Name: ThemeFusion avada builder vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for avada builder by ThemeFusion.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.7

Avg CVSS

2024–2025

Last updated April 1, 2025

Overview

ThemeFusion avada builder has 4 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ThemeFusion avada builder, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of ThemeFusion avada builder's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ThemeFusion avada builder's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ThemeFusion avada builder CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every ThemeFusion avada builder version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.11.141 CVE
<= 3.11.111 CVE
<= 3.11.121 CVE
<= 3.11.141 CVE

Fixed in

3.11.141 CVE

Find a version

4 CVEs

Sort

Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1665
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (17th pct)2025-04-01
Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-13345
Patch
CWE-94
Critical · CVSS 9.8
EPSS 0.5% (42th pct)2025-02-13
Avada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
CVE-2024-12477
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (13th pct)2025-01-22
Avada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure
CVE-2024-12335
Patch
CWE-639
Medium · CVSS 4.3
EPSS 0.4% (29th pct)2024-12-25

Common weakness types

The CWE weakness categories most often found in ThemeFusion avada builder CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ThemeFusion avada builder CVEs were published each year.

2024

1

2025

3

Other ThemeFusion products

Browse vulnerabilities for other products by ThemeFusion.

avada22 CVEs Avada (Fusion) Builder14 CVEs Fusion Builder12 CVEs Avada | Website Builder For WordPress & WooCommerce8 CVEs Avada Core2 CVEs Avada Custom Branding1 CVEs Avada (premium WordPress theme)1 CVEs

All ThemeFusion vulnerabilities

Frequently asked questions

Common questions about ThemeFusion avada builder vulnerabilities.

How many CVEs does ThemeFusion avada builder have?: ThemeFusion avada builder has 4 published CVE records since 2024.
How many ThemeFusion avada builder CVEs are in CISA KEV?: None of ThemeFusion avada builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ThemeFusion avada builder vulnerabilities?: No ThemeFusion avada builder CVEs currently have a tracked public exploit in this dataset.
Which versions of ThemeFusion avada builder are affected?: 5 distinct ThemeFusion avada builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ThemeFusion avada builder CVEs?: ThemeFusion avada builder's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical ThemeFusion avada builder vulnerabilities are there?: ThemeFusion avada builder has 1 critical and 0 high-severity CVEs.
What is the average severity of ThemeFusion avada builder CVEs?: The average CVSS base score across ThemeFusion avada builder's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ThemeFusion avada builder vulnerabilities

Monitor new ThemeFusion avada builder vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing