Skip to content
OpenAdvisories

Product · ThemeFusion

Avada

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-58922

    WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.

    ThemeFusion Avada
  • Medium 5.3
    CVE-2025-64634

    WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through <= 7.13.2.

    ThemeFusion Avada
  • Medium 5.3
    CVE-2025-24748

    WordPress Avada theme <= 7.11.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.

    ThemeFusion Avada
  • Medium 4.3
    CVE-2024-54357

    WordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.

    ThemeFusion Avada
  • Medium 4.3
    CVE-2023-39922

    WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

    ThemeFusion Avada