Avada Core

fusion-core · plugin

Known security vulnerabilities for Avada Core. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

1 critical · latest Jul 23, 2026

Vulnerabilities

CVE-2026-65471
WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Critical 9.6
CVE-2026-32454
WordPress Avada Core plugin < 5.15.0 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
CVE-2026-32453
WordPress Avada Core plugin < 5.15.0 - Broken Access Control vulnerability
Medium 5.3