CVE-2026-115346 - Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field
CVE ID :CVE-2026-115346 Published : Oct. 30, 2026, 5:15 p.m. | 45 minutes ago Description :The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convert_palette_images_to_truecolor()...