FTC/ASA Disclosure: Links in this post are affiliate links. At no additional cost to you, I will earn a commission if you purchase via my links. Thank you in advance for your support!
Avada is one of the longest-running names on ThemeForest: a WordPress theme by ThemeFusion that ships with its own visual builder, header and footer builders, form builder, WooCommerce builder, and a big library of prebuilt websites. You buy it once on Envato Market, install it on one site, and keep receiving updates. It is not a lifetime deal or a limited-time promo. It is a standard one-time ThemeForest license, and that is the lens for this review.
Avada is also in the news for reasons that have little to do with features. In the past six weeks it shipped a critical security fix, a second security release, and a beta of a subscription successor called Avada One. If you run Avada or are deciding whether to build on it, those matter more than any feature list. I worked from the ThemeForest item page, ThemeFusion’s posts, security trackers, and public buyer comments — not a hands-on benchmark.
What you get with the Regular license
The ThemeForest item page lists the Regular License at $69, a one-time purchase for a single end product where end users are not charged. That price includes the Envato buyer fee and excludes tax. There is also an Extended License for products where end users pay, priced far higher and aimed at a different kind of buyer.
- Updates: the page promises “free lifetime updates for each Avada license” and describes it as a “one-time purchase, no recurring fees.”
- Support: 6 months of support from ThemeFusion is included. You can pay to extend it to 12 months.
- Current version: the page reads “Avada 7.16 is live!” with a last update of 30 September 2026, which lines up with the 7.16.2 security release.
- Compatibility: WordPress 5.7.x through 7.0.x, marked Gutenberg Optimized, and compatible with WooCommerce 7 to 9, WPML, Gravity Forms, bbPress, Easy Digital Downloads, and The Events Calendar.
- Reputation: the item page shows a 4.78-star average from about 26.6K reviews and claims more than 1,000,000 users.
Prices and availability were accurate at the time of writing and may change; check the current price on ThemeForest before you buy.
The builder, and who it actually suits
Avada’s pitch is “everything in one box.” Instead of pairing a lightweight theme with Elementor or another third-party page builder, you get ThemeFusion’s own tools:
- Live Visual Builder for front-end page editing
- Layout, Header, Footer, and Mega Menu builders for site-wide templates
- Form Builder and Off-Canvas Builder for lead capture and popups
- WooCommerce Builder for product, cart, and checkout layouts
- Performance Wizard for tuning which features load
- 110+ prebuilt websites plus a library of importable sections
Elementor is not listed among the compatible plugins, and you don’t need it. That cuts both ways: one vendor, one update stream, and fewer plugin conflicts, but pages built with Avada’s own elements mean a later move to Elementor, Bricks, or the block editor is a rebuild, not an export.
A recent workflow addition got genuine praise. Avada now lets you copy individual sections, mega menus, and footers out of prebuilt sites instead of importing a whole demo. On ThemeFusion’s tutorial for the feature, YouTube commenter SqueakyWeasel247 wrote: “Amazing! No more copying a whole page to sandbox just to get one section … PLUS ability to copy mega menus and footers too.”
The natural fit is agencies and freelancers who build many similar client sites, small WooCommerce stores that want a single toolkit, and site owners already invested in the Avada ecosystem.
Check Avada’s builders and prebuilt sites
The security window: keep Avada updated
- Critical RCE, patched 25 August 2026. CVE-2026-18431 is an unauthenticated remote code execution flaw rated CVSS 9.8, affecting Avada 7.16 and earlier along with Fusion Builder 3.16 and earlier. ThemeFusion’s 7.16.1 release fixed “a remote code execution vulnerability in the Fusion Patcher” and credited Wordfence. Coverage continued into September, with an Axeploit write-up on 15 September and an updated WPScan record on 18 September.
- Six more fixes, 30 September 2026. Avada 7.16.2 shipped “fixes for six security issues, and ongoing security hardening.” They include possible XSS in Avada Forms and user profile fields, information exposure in the Instagram and WooCommerce order elements, and checkout validation in the Stripe Button element.
- An open add-on issue. CVE trackers list CVE-2026-65524, a missing-authorization issue in the separate Avada Custom Branding add-on (version 1.2 and earlier), as unpatched as of 6 October 2026. When a buyer asked about it on YouTube, Avada replied that its team was checking the report and quoted the listing’s note that “this security issue has a low severity impact and is unlikely to be exploited.”
None of this makes Avada uniquely unsafe; popular WordPress products get probed, and ThemeFusion disclosed and patched these publicly. But it changes how you run it. If you are on anything older than 7.16.2, update the theme and the Avada Core and Builder plugins now. Use the built-in patcher, keep backups, and if you use Custom Branding, watch for a fix or switch it off until one ships. A theme this widely installed is a target, so “set and forget” is not an option.
Avada Classic vs Avada One
In May 2026, ThemeFusion announced Avada One, a new generation that “will be sold directly through avada.com and will follow a subscription-based model.” The beta opened on 11 September 2026 through My Avada accounts, with a request to install it only on fresh WordPress sites and not on live client work.
Meanwhile, the ThemeForest product continues as Avada Classic. ThemeFusion’s position is clear: “The original Avada will continue to be sold on ThemeForest with the same licensing model, ongoing updates, support, fixes, and continued development.” The beta post adds: “Beta access is temporary… Nothing about your existing Avada licenses will change.” The 7.16.1 and 7.16.2 releases on the Classic track were both described as delivering new features alongside fixes.
At least one competing ThemeForest author describes the ThemeForest version as maintenance-only. That is a competitor’s characterization, not what ThemeFusion says. What is fair to say is that the newest architecture and most of the roadmap energy are going into Avada One. If you buy Classic today, you are buying a mature, supported product, not a front-row seat to the next generation.
Buyers who like Classic as it is seem relieved. In June, Christian Renner wrote on ThemeFusion’s Q&A post: “I’m particularly pleased that Avada Classic will remain available and that security updates will continue to be provided. Many of my clients are completely satisfied with the existing features and don’t want anything more.” On the beta post, Nils van der Knaap called himself a “Happy customer for many years.”
What buyers are saying, including the complaints
An honest note first: organic buyer chatter about Avada is thin right now. Most attention is on the security releases and Avada One, and wider builder debates have moved to Elementor, Bricks, and the block editor. The voices below are a small public sample.
Mobile layout quirks. On a September tutorial, YouTube commenter Arte-Fakt reported: “When I disable Container 100% Height On Mobile, all my containers appear stacked on top of each other on mobile devices… This is obviously a serious bug. This has been happening for a while now.” Around late September, simonetimpano1765 noticed a change after the Layout builder arrived: “Before to the Layout section, my menu used to not override the header but push it down, which is way nicer.” Avada’s reply was to submit a support ticket.
Blunt frustration. Replying to a creator’s “is Avada still the best” video around early September, YouTube commenter StuSiney wrote: “working on an avada site right now and can tell you 100% bo it is not – it is RUBBISH.”
Speed and bloat. This is the most persistent complaint across 2026. In an r/Wordpress thread comparing Bricks and Avada, one user said “it’s time I move on from Avada since it seems to be painfully bloated and has a lot of components that ‘call home,’ which is my big firewall issue. This leads to a really slow site.” Independent review blogs back up the direction. One themescout measurement of Avada’s own demo site put mobile PageSpeed at 66 with a 5.2-second LCP. Those same reviews note that the Performance Wizard plus good caching closes much of the gap, so treat the default install as a starting point, not the finished speed.
Who should buy Avada, and who should skip it
Avada makes sense if you:
- Want one vendor for theme, builder, forms, mega menus, and WooCommerce templates
- Build many client sites and can reuse prebuilt sections and layouts
- Prefer a one-time license over a monthly builder subscription
- Already run Avada sites and want to stay on a supported Classic track
- Are comfortable applying updates promptly and keeping backups
Skip it, or look elsewhere, if you:
- Chase top Core Web Vitals scores and want a lean theme out of the box
- Want content that ports cleanly to Gutenberg or another builder later
- Need long-term vendor support without paying to extend past six months
- Want the newest Avada architecture and AI features, which are heading to Avada One
- Run sites you can’t update regularly. Given the past six weeks, that is a real risk.
Bottom line
Avada is still a deep, all-in-one WordPress builder with a one-time price, lifetime updates, and a vendor that discloses and ships fixes in public. Its weak spots are well known: heavy default pages, a learning curve, builder lock-in, and some mobile quirks. The recent security churn means it needs active maintenance, and the ThemeForest version is now the Classic track. ThemeFusion says Classic keeps getting development, but the spotlight has moved.
If you want a single toolkit for client sites or a WooCommerce store, and you will keep it updated, I’d call Avada Classic a reasonable buy. If speed scores or portability top your list, a lighter theme with the block editor or a dedicated builder will likely serve you better.
See today’s price for Avada on ThemeForest
Sources
- ThemeForest: Avada | Website Builder For WordPress & eCommerce (item page: license, support, version, compatibility)
- ThemeFusion: Version 7.16.1 Security Update (25 August 2026)
- ThemeFusion: Version 7.16.2 Security Update (30 September 2026)
- ThemeFusion: A New Chapter for Avada (28 May 2026)
- ThemeFusion: Your Questions About Avada One Answered (comments, June 2026)
- ThemeFusion: Avada One Beta (11 September 2026, with comments)
- CVE records: CVE-2026-18431 and CVE-2026-65524; WPScan vulnerability record (updated 18 September 2026); Axeploit write-up (15 September 2026)
- YouTube comments on Avada tutorials (dates approximate): copying prebuilt content, full-screen scrolling sections, menu element, Custom Branding question
- YouTube comment on MARTINI ASSI, “Is Avada Still The BEST WordPress Theme After 10 Years?”
- Reddit r/Wordpress: Bricks Builder vs Avada etc.
- themescout Avada performance review (2026 blog measurement, context only)
