avada_website_builder_for_wordpress_woocommerce vulnerabilities

CVEs whose affected-version data names the avada_website_builder_for_wordpress_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84925Medium· 6.1

yesterday

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and …

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and …

▾ SunlitThemeFusion · Avada | Website Builder For WordPress & WooCommerceEPSS 0.17%via NVD