Avada v7.16.2 WordPress Theme

What’s New (Changelog) in Avada v7.16.2

Version 7.16.2 - September 30th, 2026
-----------------------------------------------------------------------------------------

Security hardening
- SECURITY: Fixed possible XSS and injection vulnerability in Avada Forms submissions / notification emails
- SECURITY: Fixed possible reflected XSS vulnerability in a legacy theme upgrade routine
- SECURITY: Fixed possible sensitive information exposure in the Instagram element
- SECURITY: Fixed insufficient validation of the checkout data in the Stripe Button element
- SECURITY: Fixed possible sensitive information exposure in the WooCommerce order elements and dynamic data
- SECURITY: Fixed possible Subscriber+ level stored XSS vulnerability via user profile fields
- SECURITY: Ongoing security hardening across several areas of the product

Main Changelog
- NEW: Added page transitions to Global Options and Page Options, which animate the navigation between the pages with several effects
- NEW: Added aurora backgrounds to Containers and Columns, an animated gradient of soft color blobs with drift, swirl and pulse animations, incl. up to four colors, speed, size, blur, opacity and blend mode options
- NEW: Added the Post List element to display a list of posts, pages, or entries of any other post type, based on the architecture of the Categories element and replacing the WordPress pages widget
- NEW: Added price modes to the Stripe Button element, which can now use a fixed price, a price selected from your Stripe account, or an amount entered by the customer, incl. minimum and maximum limits
- NEW: Added a text option to the ToTop button, with the icon placed before, after or above the text, incl. support for the scroll progress
- NEW: Added a backdrop blur option to the Off Canvas overlay, e.g. for frosted glass effects behind popups and sliding bars
- NEW: Added responsive absolute positioning to Columns, analogous to Containers
- NEW: Added a Fill Column Height option to the aspect ratio of the Image and Post Card Image elements
- NEW: Added an option to exclude or include the current post to the Post Cards element
- NEW: Added the author social profiles from the dynamic data engine to the Social Links element
- NEW: Added API key options for the Carto and Stamen tile styles, as well as a high-DPI tiles option, to the OpenStreetMap element
- NEW: Added a Persist Query Cache option to Global Options, to choose if Avada's internal query results are stored in the persistent object cache
- IMPROVEMENT: Improved the Role Manager, incl. a separate capability to manage Avada Forms submissions, and turning off builder access no longer locks a role out of the post edit screen entirely
- IMPROVEMENT: Revamped the .htaccess rules of the compression option, which now also adds browser caching headers, uses Brotli when available, and is no longer hidden on PHP-FPM and FastCGI servers
- IMPROVEMENT: Google Fonts CSS is no longer requested more than once per page generation, and the Google Fonts cache is no longer bypassed on pages without extra fonts
- IMPROVEMENT: Added fetchpriority="high" to the Critical CSS image preload tags
- IMPROVEMENT: The WooCommerce quick view container markup is no longer printed into every page when activated, which also fixes the conflict with Cloudflare's Email Obfuscation
- IMPROVEMENT: The nothing found messages of the Post Cards and archive elements now display in the Live Editor and can be edited with the element generator
- IMPROVEMENT: Global elements that were accidentally wrapped in a Text Block, e.g., through content copying by WPML, are now corrected on save
- IMPROVEMENT: The Instagram element no longer makes a REST loopback request, caches the feed correctly, and falls back to the preview image when a media URL is missing
- IMPROVEMENT: Avada Sliders are now listed in the Edit Live menu of the admin bar
- IMPROVEMENT: Carousel navigation arrows are now always vertically centered on the slides, also when the pagination is placed above or below them, and the gap below carousel images has been reduced
- ACCESSIBILITY: Improved the accessibility of the special menu items, incl. correct link labels and screen reader announcements of cart count changes
- ACCESSIBILITY: Added titles to the YouTube and Vimeo background video iframes of Containers for better accessibility
- COMPATIBILITY: Custom Auth Pages no longer take over WordPress authentication actions they don't handle, so that password resets of third-party form plugins work again
- COMPATIBILITY: Support for the different ticket form positions of The Events Calendar Event Tickets plugin
- UPDATED: Compatibility with WooCommerce 11.1.2
- UPDATED: Select2 library to version 4.0.13
- FIXED: Single prebuilt website page imports not working
- FIXED: Importing Avada Builder elements and templates creating the original author of the export as a user
- FIXED: Search element not filtering the results by the selected terms on sites where term IDs and term taxonomy IDs differ
- FIXED: WooCommerce Filters element in dropdown mode not working when AJAX filtering is turned off, but AJAX sorting is turned on
- FIXED: Post Cards element ID sorting not working
- FIXED: Title typography options of the Flip Boxes, Recent Posts and Pricing Table elements not being applied for some title tags, e.g., DIV
- FIXED: Scrolling sections only displaying the first section when the effect is disabled on mobile
- FIXED: Elements with explicitly set pointer events breaking out of the pointer event disabling of 100% height scrolling sections
- FIXED: Side header in boxed mode with offset extending beyond the content at the bottom of the page
- FIXED: Facebook sharing on iOS opening the home screen of the Facebook app instead of the share dialog
- FIXED: Icon picker on WooCommerce attributes not rendering custom icon sets
- FIXED: WooCommerce quick view throwing a PHP error for IDs that are not products
- FIXED: PHP 8.4 warnings in the Fusion Slider when slides have no image data
- FIXED: Avada Forms multi upload field removing files when pressing enter in a text input
- FIXED: Avada Forms entries not using the WordPress timezone for the submission time
- FIXED: Live Editor not loading on servers where the PHP default charset is empty
- FIXED: Layout edit links being invalid when using custom permalinks
- FIXED: Context menu options not always being correct for library elements, like Layout Sections, Post Cards and Rollovers
- FIXED: Column size changes not updating in the Navigator until the page was reloaded
- FIXED: Image Carousel picture size changes not enabling the save button in the Live Editor, and hotlinked slides possibly going blank

-----------------------------------------------------------------------------------------