Bhutan Computer Incident Response Team btcirt.bt

Unauthenticated Authorization Bypass in the Avada (Fusion) Builder WordPress Plugin (CVE-2026-97670) – 20261013010

Imported from official source

October 14, 2026 14:03 Announcement

Cybersecurity Classified by Officially

Severity CRITICAL Threat Category Vulnerability – Authorization Bypass / Code Injection (CWE-94) Affected Platforms WordPress sites running the Avada (Fusion) […] The post Unauthenticated Authorization Bypass in the Avada (Fusion) Builder WordPress Plugin (CVE-2026-97670) – 20261013010 first appeared on Bhutan Computer Incident Response Team.

This is an extract. The publication continues at the source.

Read the original at the source: https://btcirt.bt/unauthenticated-authorization-bypass-in-the-avada-fusion-builder-wordpress-plugin-cve-2026-97670-20261013010/

Officially imported this from Bhutan Computer Incident Response Team’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Bhutan Computer Incident Response Team — imported from official source
Official source: https://btcirt.bt/category/newsevents/advisory/feed/ RSS
Imported: October 14, 2026 14:30
Versions: 1 recorded
Identity: https://btcirt.bt/?p=39122