Themefusion Avada vulnerabilities

8 vulnerabilities

Known vulnerabilities in Themefusion Avada, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2025-58922themefusionavada+1
EPSS score
0.10%
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.5.3CVE-2025-24748themefusionavada+1
EPSS score
0.26%
Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.5.3CVE-2025-64634theme-fusionavada+2
EPSS score
0.25%
Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through <= 7.13.2.4.3CVE-2024-54357theme-fusionavada+2
EPSS score
0.18%
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.8.8CVE-2023-39922theme-fusionavada+2
EPSS score
0.37%
Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.8.5CVE-2023-39313theme-fusionavada+2
EPSS score
0.57%
Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.8.8CVE-2023-39307theme-fusionavada+2
EPSS score
0.67%
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.9.1CVE-2023-39312theme-fusionavada+2
EPSS score
0.60%
Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.