CVE Intelligence

Avada Studio vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Avada Studio products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-65471 Critical · 9.6 CWE-352 Jul 23, 2026
WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.