Description
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbitrary plugin installation/activation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeFusion | Avada (premium WordPress theme) | <= 7.8.1 – ≤ 7.8.1 | — |