← Database

CVE-2022-41996

HIGH CVSS: 8.8 Published: 2022-10-27 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbitrary plugin installation/activation.

Affected Platforms

Theme-Fusion Avada

Weakness Type

CWE-352, CWE-352

References