CVE-2024-1468 Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload

What is CVE-2024-1468?

CVE-2024-1468 is a high-severity vulnerability in ThemeFusion Avada | Website Builder For WordPress & WooCommerce, published on 29 Feb 2024. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_import_options() function in all versions up to, and including, 7.11.4. This makes it possible for authenticated attackers, with contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

Weakness: CWE-434

Which versions are affected by CVE-2024-1468?

It affects 1 product.

Products include Theme-Fusion Avada.

How do I fix CVE-2024-1468?

No fix has been published for CVE-2024-1468 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-1468 being exploited?

There is no known exploitation of CVE-2024-1468 in the wild and no public exploit code.

Other vulnerabilities in ThemeFusion Avada | Website Builder For WordPress & WooCommerce

• CVE-2023-39312 WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability Critical 9.1
• CVE-2022-41996 WordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerability High 8.8
• CVE-2017-18607 Cross-site request forgery in n/a High 8.8
• CVE-2023-39307 WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability High 8.5
• CVE-2023-39313 WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability High 7.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6rj2-w8v9-xrxq.