CVE-2025-58922: Themefusion Avada

Medium severity, CVSS 4.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.

Affected products

• Themefusion Avada: before 7.13.2 (fixed in 7.13.2)

Published 2026-04-22. Last modified 2026-10-07.