A vulnerability was found in Avada Plugin up to 7.11.6 on WordPress and classified as critical. Affected by this issue is the function form_to_url_action. The manipulation leads to server-side request forgery.

This vulnerability is handled as CVE-2024-2343. The attack may be launched remotely. There is no exploit available.