← All advisories

Medium severity4.3NVD Advisory· Published Dec 16, 2024· Updated Apr 23, 2026

CVE-2024-54357

CVE-2024-54357

Description

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10.

Affected products

2

Theme Fusion/Avada2 versions
cpe:2.3:a:theme-fusion:avada:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:theme-fusion:avada:*:*:*:*:*:wordpress:*:*range: <7.11.11
- (no CPE)range: <=7.11.10

Patches

Vulnerability mechanics

References

1

patchstack.com/database/Wordpress/Theme/avada/vulnerability/wordpress-avada-theme-7-11-10-cross-site-request-forgery-csrf-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.