CVE-2026-4798: Avada Builder expone 1 millón de sitios

CVE-2026-4798 expone 1 millón de sitios WordPress a robo de credenciales vía Avada Builder. ¿Tu sitio usó WooCommerce alguna vez? Verificá ahora y actua...

https://seguridadenwordpress.com/cve-2026-4798-avada-builder-sql-injection-wordpress/

#cve20264798 #avadabuilder #sqlinjection #wordfence #wordpressvulnerabilidades

Two severe vulnerabilities, CVE-2026-4782 (arbitrary file read) and CVE-2026-4798 (unauthenticated SQL injection), have been discovered in the Avada Builder WordPress plugin by Wordfence. These flaws could allow attackers to steal database credentials and compromise your entire site, even with low-privilege access or, in one case, no authentication at all. Update to Avada Builder 3.15.3 or…

https://www.tpp.blog/1rptbbe

#cybersecurity #avadabuilder #wordpress

🤖 This post was AI-generated.

#AvadaBuilder #WordPress plugin flaws allow site credential theft

https://www.bleepingcomputer.com/news/security/avada-builder-wordpress-plugin-flaws-allow-site-credential-theft/

#cybersecurity

Avada Builder Flaws Expose WordPress Sites to Credential Theft

A critical vulnerability in the Avada Builder WordPress plugin, used by an estimated one million active installations, leaves sites exposed to credential theft and data breaches. Two flaws, CVE-2026-4782 and CVE-2026-4798, allow attackers to read sensitive files and extract database information, putting your site at risk.

https://osintsights.com/avada-builder-flaws-expose-wordpress-sites-to-credential-theft?utm_source=mastodon&utm_medium=social

#Wordpress #AvadaBuilder #CredentialTheft #ArbitraryFileRead #SqlInjection

Avada Builder: 2 vulnerabilidades críticas en 1M de sitios

¿Tu sitio tiene Avada Builder sin actualizar? Las CVE-2026-4798 y CVE-2026-4782 exponen 1 millón de WordPress a SQL injection y robo de wp-config. Actua...

https://seguridadenwordpress.com/avada-builder-vulnerabilidad-wordpress-cve-2026-4798/

#avadabuilder #cve20264798 #inyecciónsql #wordpressseguridad #fusionbuilder

Avada Builder Flaws Put 1 Million WordPress Sites at Risk

Two newly discovered flaws in the Avada Builder plugin have put a staggering 1 million WordPress sites at risk, allowing hackers to exploit vulnerabilities and access sensitive server files. This critical security threat highlights the urgent need for site owners to take action and protect their online presence.

https://osintsights.com/avada-builder-flaws-put-1-million-wordpress-sites-at-risk?utm_source=mastodon&utm_medium=social

#Wordpress #AvadaBuilder #Cve20264782 #ArbitraryFileRead #PluginVulnerabilities