avada_website_builder_for_wordpress_woocommerce vulnerabilities
CVEs whose affected-version data names the avada_website_builder_for_wordpress_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-97340Medium· 6.4The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author Page' social link contact-method fields (author_facebook, author_twitter, author_linked…
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author Page' social link contact-method fields (author_facebook, author_twitter, author_linked…
▾ SunlitThemeFusion · Avada | Website Builder For WordPress & WooCommerceEPSS 0.15%via NVD
CVE-2026-84925Medium· 6.1The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and …
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and …
▾ SunlitThemeFusion · Avada | Website Builder For WordPress & WooCommerceEPSS 0.17%via NVD