Login Request a demo
AV
Product
Avada
by Theme-fusion · last CVE Dec 16, 2025
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 2High 8Medium 9Low 0
Severity
All severities19Critical2High8Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Avada to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-39312
8.8
1%
Jun 19
Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1
Affected: before 7.11.2
CVE-2023-39922
8.8
0%
Jun 19
Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1
Affected: before 7.11.2
CVE-2023-39307
8.8
1%
Mar 26
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1
Affected: before 7.11.2
CVE-2024-1468
8.8
1%
Feb 29
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
Affected: before 7.11.5
CVE-2022-41996
8.8
1%
Oct 27
WordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerability
Affected: through 7.8.1
CVE-2017-18607
8.8
1%
Sep 10
The avada theme before 5.1.5 for WordPress has CSRF
Affected: before 5.1.5
CVE-2023-39313
7.7
1%
Mar 28
Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1
Affected: before 7.11.2
CVE-2024-2344
7.2
1%
Apr 9
The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and including, 7.11.6 due to insufficient escaping on the user…
Affected: before 7.11.7
Showing 8