Vulnerabilities

Critical Avada WordPress theme flaw enables zero-click RCE

August 26, 2026 1 min read 5 views
cybersecurity malware news
A critical vulnerability chain in the Avada WordPress theme and Fusion Builder plugin allows unauthenticated attackers to execute arbitrary PHP code. Tracked as CVE-2026-18431 with a 9.8 severity score, it affects versions up to 7.16 and 3.16 respectively.

Was this article helpful?

0 found this helpful

Related Articles

Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog

5 min read

Jev and other decision models can still be tricked with prompt injection

3 min read

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo