CVE-2026-65471
WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
CVSS 3.1 · 9.6 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products