CVE-2026-8713 - Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value
CVE ID :CVE-2026-8713 Published : June 19, 2026, 4:31 a.m. | 6 hours, 38 minutes ago Description :The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybe_delete_files function in all versions up to, and...