Description
Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeFusion | Avada | ≤ 7.11.10 | — |
Medium · 5.3
CVE-2025-24748
EUVD-2025-19957GHSA-33pw-99cq-v6w5
WordPress Avada theme <= 7.11.10 - Broken Access Control vulnerability
Published Jul 4, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack