CVE-2022-1386-FusionBuilder-SSRF

CVE-2022-1386 – Fusion Builder 示例： python3 exploitcve20221386.py https://vulnerable.site https://abc123.oast.fun 使用Interact.sh或Burp Collaborator接收回调。 📋 示例输出 从目标获取nonce... 向https://abc123.oast.fun发送SSRF载荷... + SSRF确认：从受害服务器收到回调。 📌 注意 此PoC不会进行数据窃取。 仅限道德使用：未经授权请勿利用系统。 📚 参考...

Avada < 7.11.7 - Information Disclosure

The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11.6 via the '/wp-content/uploads/fusion-forms/' directory. This makes it possible for unauthenticated attackers to extract sensitive data uploaded via an Avada created form with ...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery

WordPress Fusion Builder plugin before 3.6.2 is susceptible to server-side request forgery. The plugin does not validate a parameter in its forms, which can be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. An attacker can...

CVE-2026-6279

CVE-2026-6279 Avada Builder = 3.15.2 — 未认证RCE 通过无白名单的 calluserfunc 漏洞概述 远程代码执行（RCE）无需认证 存在于 Avada Builder Fusion Builder 版本 = 3.15.2 中，该插件用于 WordPress Avada 主题——最流行的 WordPress 高级主题之一，拥有 900,000+ 活跃安装。 攻击利用 AJAX 处理器 wpajaxnoprivfusiongetwidgetmarkup，该处理器通过 base64decode + jsondecode 处理 renderlogics...

CVE-2026-8713

CVE-2026-8713 — Avada Fusion Builder WordPress 漏洞利用 未经认证的路径遍历 → 任意文件删除 → 强制重装 → 远程代码执行 概述 CVE-2026-8713 是 WordPress 的 Avada Fusion Builder 插件/主题中的一个 CVSS 9.1 严重漏洞。FusionFormDBEntries 类中的 maybedeletefiles 函数使用简单的字符串替换，从攻击者控制的表单条目值构建文件系统路径——不经过 realpath 验证或目录包含检查。 未经认证的攻击者通过 fusionformsubmitajax...

CVE-2026-6279.py

描述 这个Python脚本是一个针对CVE-2026-6279的利用工具，目标为Avada Builder = 3.15.2。 主要行为： 通过Avada特定的短代码/页面模式扫描目标以获取 fusionloadnonce 发现AJAX端点，并在Cloudflare阻止admin-ajax时绕过原始IP 构建针对 fusiongetwidgetmarkup 的利用请求 尝试通过 system、passthru、shellexec、exec 和 filegetcontents 实现RCE 支持交互式Shell模式、批量扫描、上传/下载、侦察和反向Shell辅助功能...

CVE-2024-13346

CVE-2024-13346 Avada 主题 7.11.14 - 未经认证的任意短代码执行 CVE-2024-13346 漏洞利用脚本 安装代码 git clone https://github.com/tausifzaman/CVE-2024-13346.git cd CVE-2024-13346 pip install -r requirements.txt python3 exploit.py Google Cloud Console Cloud Shell...

WordPress Avada | Website Builder For WordPress & WooCommerce theme <= 7.16.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by daroo in WordPress Theme Avada versions = 7.16.1...

CVE-2026-84925

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

EUVD-2026-91174

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-84925 Avada | Website Builder For WordPress & WooCommerce <= 7.16.1 - Reflected Cross-Site Scripting via 'lang' Parameter

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-84925

The Avada | Website Builder For WordPress & WooCommerce theme is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 7.16.1 . The root cause is insufficient input sanitization and output escaping of the 'lang' parameter . Specifically, the injected value is prop...

PT-2026-104080

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-6279

╔══════════════════════════════════════════════════════════════╗ ║ CVE-2026-6279 · Avada Builder = 3.15.2 ║ ║ Unauthenticated RCE via calluserfunc ║║ ╚══════════════════════════════════════════════════════════════╝ 📋 摘要 字段| 详情 ---|--- CVE ID| CVE-2026-6279 受影响版本| Avada Builder Fusion Builder =...

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and...

CVE-2026-16654

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-67409

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-16654

The Avada (Fusion) Builder WordPress plugin is vulnerable to Stored Cross-Site Scripting via its 'size' shortcode attribute in all versions up to and including 3.15.6 . The root cause is insufficient input sanitization and output escaping: because the injected payload resides entirely within a sh...

CVE-2026-16654 Avada (Fusion) Builder <= 3.15.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode Attribute

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...