thanks to dear member @theresa updated Avada | Best Website Builder For WordPress & WooCommerce with a new update entry:
March 19th, 2024
Read the rest of this update entry...
March 19th, 2024
- SECURITY: Fixed Contributor+-level-only XSS vulnerability, allowing site Contributors to add custom script code certain element link options
- SECURITY: Fixed Contributor+-level-only SSRF vulnerability, allowing Contributors to set Avada Form submission type to unsafe web requests
- SECURITY: Fixed Admin+-level-only SQL injection vulnerability, where SQL code could be injected into an Avada Forms submissions entry removal request
- SECURITY: Fixed possibility of Avada Forms upload folder...
Read the rest of this update entry...