Avada Studio vulnerabilities
Published CVEs affecting Avada Studio products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-65471
Critical · 9.6
CWE-352 Jul 23, 2026
WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.