← CVE Intelligence

CVE-2023-39312

WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

Affected (CNA)

Vendor / product	Versions
ThemeFusion / Avada	affected n/a through 7.11.1

CWE

CWE-862

References

https://patchstack.com/database/vulnerability/avada/wordpress-avada-theme-7-11-1-authenticated-author-unrestricted-zip-extraction-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://patchstack.com/database/vulnerability/avada/wordpress-avada-theme-7-11-1-authenticated-author-unrestricted-zip-extraction-vulnerability?_s_id=cve