“Avada Builder” has a security vulnerability, Critical

Hi @pixee22,

I’ll be happy to look into this further, but 3.11.10 seems to be the patched version whereas 3.11.9 and below are flagged. Is the detection of your “current plugin version” at 3.11.2 (which is in the unpatched range) incorrectly detected? Independently of Wordfence, what version is being displayed on your WordPress > Installed Plugins page?

Sometimes with non-repository plugins the responsibility is with the developer to correctly report the version number to WordPress – which Wordfence uses during its scans.

Many thanks,
Peter.

Hi @pixee22,

If you don’t mind, please allow me to help.

Our website uses Avada. No issues with Wordfence.

The latest version of Avada is 7.11.11, which includes all security updates.

Solution: Update Avada to 7.11.11, which includes Avada Builder 3.11.11 and Avada Core 5.11.11.

If properly installed and using a licensed copy of Avada, you should be receiving Avada updates automatically.

If satisfied with the above, please consider closing this topic as “Resolved.”

Cheers!

Note: I’m not affiliated with Wordfence. Simply offering goodwilll support.

Hello @wfpeter, @generosus,
Thank you for your help. I’m using licence, but I can’t find how to change it to a higher version. I have a second website with Avada, and the updates work fine, but here it’s stuck on version 7.11.2, and the new updates “automatically” doesn’t work. Is there any option to do it manually?
Best regards, P.

Hi @pixee22,

Contact Avada Support for assistance or update Avada manually.

Your issue is not related to Wordfence.

If satisfied with the above, please close this topic as “Resolved.”

Cheers!

Oh, I found the solution after deleting the whole browser history ?? Thank you, have a nice Friday, resolved.