8.8 High

CVE-2022-41996 Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme…

Description

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbitrary plugin installation/activation.

Affected products and versions

Product	Affected versions	Fixed in
Avada (premium WordPress theme) 7.8	earliest → 7.8.1	No fix stated

Do you use Avada (premium WordPress theme)?

Track this CVE Watch Avada (premium WordPress theme) Check my SBOMs

www.cveye.io/en/cve/CVE-2022-41996

Timeline

Published October 27, 2022
Last modified April 28, 2026

References

patchstack.com patchstack.com
theme-fusion.com theme-fusion.com
themeforest.net themeforest.net

Track this CVE