CVE-2025-58922: WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability
Published Apr 22, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.
Affected Software
1 affected component
ThemeFusion Avada<7.13.2
Remediation
Information
Update the WordPress Avada theme to the latest available version (at least 7.13.2).
Event History
Apr 22, 2026
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-58922?
CVE-2025-58922 is classified as a medium severity vulnerability due to its potential for exploitation via Cross Site Request Forgery.
2
How do I fix CVE-2025-58922?
To fix CVE-2025-58922, update the ThemeFusion Avada theme to version 7.13.2 or later.
3
What type of vulnerability is CVE-2025-58922?
CVE-2025-58922 is a Cross Site Request Forgery (CSRF) vulnerability affecting the Avada theme.
4
Which versions of Avada are affected by CVE-2025-58922?
CVE-2025-58922 affects versions of Avada prior to 7.13.2.
5
Who is affected by CVE-2025-58922?
Any user running ThemeFusion Avada versions before 7.13.2 is affected by CVE-2025-58922.