Vendor
CVE-2024-13346 affects Theme-fusion Avada versions prior to 7.11.14, allowing unauthenticated arbitrary shortcode execution. A public exploit is available.