ThemeFusion Avada vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ThemeFusion Avada: 2 record(s), with affected versions and fixes.
cpe:2.3:a:theme-fusion:avada

CVE-2025-58922 Medium · 4.3 CWE-352 Apr 22, 2026

WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.

CVE-2025-64634 Medium · 5.3 CWE-862 Dec 16, 2025

WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through <= 7.13.2.