Skip to content

Known vulnerabilities in ThemeFusion Avada

Is your version affected?

CVE Summary Score Published
CVE-2026-12256 Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object… 8.8 High Jun 16, 2026
CVE-2025-58922 Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue… 4.3 Medium Apr 22, 2026
CVE-2025-64634 Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained… 5.3 Medium Dec 16, 2025
CVE-2025-24748 Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10 5.3 Medium Jul 4, 2025
CVE-2024-54357 Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a… 4.3 Medium Dec 16, 2024
CVE-2023-39312 Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1 9.1 Critical Jun 19, 2024
CVE-2023-39922 Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1 4.3 Medium Jun 19, 2024
CVE-2023-39313 Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1 7.7 High Mar 28, 2024
CVE-2023-39307 Unrestricted Upload of File with Dangerous Type vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a… 8.5 High Mar 26, 2024

Other ThemeFusion products