CVE-2022-41996

概要

参考情報

• patchstack.com/database/vulnerability/avada/wordpress-avada-premium-theme-7-8-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• theme-fusion.com/documentation-assets/avada/changelog.txt · Release Notes
• themeforest.net/item/avada-responsive-multipurpose-theme/2833226 · Product

avada のその他の脆弱性

• CVE-2025-64634中 5.3Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue af…
• CVE-2024-13346緊急 9.8The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions u…
• CVE-2024-54357中 4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.
• CVE-2024-5628中 5.4The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fus…
• CVE-2023-39312高 8.8Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.