CVE-2026-65471

Avada Core versions up to 5.15.6 are vulnerable to an unauthenticated Cross Site Request Forgery (CSRF) attack, allowing attackers to perform actions on behalf of users without their consent. This critical vulnerability poses a significant risk to web applications utilizing this framework, potentially leading to unauthorized changes or data exposure. Organizations using affected versions should prioritize immediate updates to mitigate the risk of exploitation.