Description
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Avada Studio | Avada Core | ≤ 5.15.6 | — |
Critical · 9.6
CVE-2026-65471
EUVD-2026-48083GHSA-92mf-w334-37r6
WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack