A critical security vulnerability in the widely used Avada (Fusion) Builder WordPress plugin has exposed over 1 million websites to arbitrary file-deletion attacks, potentially leading to full-site compromise and remote code execution. The flaw, tracked as CVE-2026-8713 with a CVSS score of 9.1,...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

Critical WordPress Plugin Vulnerability Exposes 1 Million Sites to File Deletion Attacks

VERWANDTEARTIKEL

CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV List Following Active Exploitation

CVE-2023-54353 - Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation

CVE-2025-71326 - AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation

CVE-2022-50971 - Malwarebytes 4.5 Unquoted Service Path Privilege Escalation

CVE-2020-37254 - Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path

CVE-2021-47985 - Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation