Avada | Best Website Builder For WordPress & WooCommerce 7.11.11 Nulled

- SECURITY: Fixed Contributor+-level-only XSS vulnerability, allowing site Contributors to add custom script code certain element link options
- SECURITY: Fixed Contributor+-level-only SSRF vulnerability, allowing Contributors to set Avada Form submission type to unsafe web requests
- SECURITY: Fixed Admin+-level-only SQL injection vulnerability, where SQL code could be injected into an Avada Forms submissions entry removal request
- SECURITY: Fixed possibility of Avada Forms upload folder...

Click to expand...

- NEW: Added a completely revamped role manager version to allow better control over different Avada areas for different WP user roles
- NEW: Submission view access for Avada Forms can now be set to give read-only access for different user roles
- NEW: Added an option to Avada Forms, for easy resetting of form submission and view count
- NEW: Added video start and end times to YouTube, Vimeo, and Video elements
- NEW: Added an alignment option to the Audio element
- NEW: Added options to...

Click to expand...

- SECURITY: Fixed Contributor+-level-only XSS vulnerability, allowing site Contributors to add event attributes to link attributes options
- FIXED: Conditional rendering logic not working correctly in Containers on some specific setups
- FIXED: Some Global Options and Page Options not correctly triggering page changed actions in Live Editor
- FIXED: Bulk removal of Avada Form enrties not working

Click to expand...

- SECURITY: Additional security hardening for Button element attributes (This is only relevant when saving through a different page builder)
- NEW: Added 29 different dynamic data endpoints for The Events Calendar, making it easy to create custom single event layouts using the Layout Builder
- NEW: Added possibility to assign a layout to single Events Calendar events
- NEW: Added Event Venue Name, Event Organizer Name, Event Address and Event Cost to Post Meta element
- NEW: Added post type...

Click to expand...

- SECURITY: Avada's WooCommerce quick view setup is vulnerable to Broken Access Control (BAC). Worst case: drafted or private products could be obtained through quick view.
- SECURITY: Deprecated custom colors are vulnerable to Cross Site Request Forgery (CSRF). Worst case: An admin user could be tricked into creating a new color.
- IMPROVEMENT: Removed a few unnecessary cache clearing hooks
- UPDATED: Option description for OSM element Map Style to include link to the Wiki
- FIXED...

Click to expand...