Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Avada — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Avada, with AI-generated Chinese analysis, references, and POCs.

Vendor: ThemeFusion

CVE IDTitleCVSSSeverityPaused
CVE-2025-58922 WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2026-04-22
CVE-2025-64634 WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability CWE-862 5.3 Medium2025-12-16
CVE-2025-24748 WordPress Avada theme <= 7.11.10 - Broken Access Control vulnerability CWE-862 5.3 Medium2025-07-04
CVE-2024-54357 WordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2024-12-16
CVE-2023-39312 WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability CWE-862 9.1 Critical2024-06-19
CVE-2023-39922 WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability CWE-862 4.3 Medium2024-06-19
CVE-2023-39313 WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability CWE-918 7.7 High2024-03-28
CVE-2023-39307 WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability CWE-434 8.5 High2024-03-26

All 8 known CVE vulnerabilities affecting Avada with full Chinese analysis, references, and POCs where available.