ThemeFusion Avada Core

• CVE-2026-32454 Medium 6.5 WordPress Avada Core plugin < 5.15.0 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-32453 Medium 5.3 WordPress Avada Core plugin < 5.15.0 - Broken Access Control vulnerability 0.2%