| CVE-2026-97670 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…
|
9.1
Critical
|
Oct 10, 2026 |
| CVE-2026-18431 |
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when…
|
9.8
Critical
|
Aug 26, 2026 |
| CVE-2026-8713 |
The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…
|
9.1
Critical
|
Jun 19, 2026 |
| CVE-2026-6279 |
The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP…
|
9.8
Critical
|
May 21, 2026 |