Skip to content
Noroxi

Avada

avada · theme

Known security vulnerabilities for Avada. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

latest Apr 22, 2026

Vulnerabilities

  • CVE-2023-39312

    WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability

    High 8.8

  • CVE-2023-39922

    WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability

    High 8.8

  • CVE-2023-39307

    WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability

    High 8.8

  • CVE-2022-41996

    WordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerability

    High 8.8

  • CVE-2023-39313

    WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability

    High 7.7

  • CVE-2025-64634

    WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2025-24748

    WordPress Avada theme <= 7.11.10 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2025-58922→ 7.13.2

    WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

  • CVE-2024-54357

    WordPress Avada theme <= 7.11.10 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

← Back to directory