CVE Catalog
CVE-2026-65471
CriticalCVSS 9.6Summary
Avada Core versions up to 5.15.6 contain an unauthenticated Cross Site Request Forgery (CSRF) vulnerability. An attacker can trick a logged-in administrator into performing unintended actions without their knowledge.
Risk Assessment
The risk includes unauthorized operations in the context of an administrator, such as modifying settings or adding new users.
Recommendation
It is recommended to upgrade Avada Core to version 5.15.7 or later.
Original NVD description (English source)
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.