PT-2026-76552

Name of the Vulnerable Software and Affected Versions Winter versions prior to 1.2.13 Description Custom CSS provided through the Brand Settings Styles field is compiled by the LESS parser and rendered without sanitization on every backend page. This allows a user with the backend.manage branding...

CVE-2026-65524

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

CVE-2026-65524

Technical details for CVE-2026-65524 are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-48125

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

CVE-2026-65524

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

CVE-2026-65524 WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

CVE-2026-65524 WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin Avada Custom Branding versions = 1.2...

CVE-2026-65524: Missing Authorization

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

PT-2026-63935

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

Moderate: Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.7]

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...