ThemeFusion Avada vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20252
3. 20261

Newest CVEs

• CVE-2025-58922

  WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability

  ThemeFusion · Avada

  Medium4.3
• CVE-2025-64634

  WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

  ThemeFusion · Avada

  Medium5.3
• CVE-2025-24748

  WordPress Avada theme <= 7.11.10 - Broken Access Control vulnerability

  ThemeFusion · Avada

  Medium5.3
• CVE-2024-54357

  WordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerability

  ThemeFusion · Avada

  Medium4.3
• CVE-2023-39312

  WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability

  ThemeFusion · Avada

  Critical9.1
• CVE-2023-39922

  WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability

  ThemeFusion · Avada

  Medium4.3
• CVE-2023-39313

  WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability

  ThemeFusion · Avada

  High7.7
• CVE-2023-39307

  WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability

  ThemeFusion · Avada

  High8.5