Unauthenticated Authorization Bypass in the Avada (Fusion) Builder WordPress Plugin (CVE-2026-97670) – 20261013010

Bhutan Computer Incident Response Team Version 1 original current

Imported from official source

Severity CRITICAL Threat Category Vulnerability – Authorization Bypass / Code Injection (CWE-94) Affected Platforms WordPress sites running the Avada (Fusion) […] The post Unauthenticated Authorization Bypass in the Avada (Fusion) Builder WordPress Plugin (CVE-2026-97670) – 20261013010 first appeared on Bhutan Computer Incident Response Team.

This version

Version
1 of 1
Recorded
October 14, 2026 14:30
Change
Initial
Content hash
f6cd9b9d7848ef21d6494b74f9a794eb
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.