CVE-2026-4798

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-4798

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-4798 Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

EUVD-2026-29934

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-4798

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-4798 Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

Threat Outbreak Alert RuleID14045: Email Messages Distributing Malicious Software on March 16, 2015

Medium Alert ID: 37886 First Published: 2015 March 16 20:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14045 may contain the following files: Name | Si...

Threat Outbreak Alert: Fake Product Order Email Messages on May 15, 2014

Medium Alert ID: 34251 First Published: 2014 May 16 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product list for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Product Order Confirmation Notice Email Messages on April 21, 2014

Medium Alert ID: 33869 First Published: 2014 April 21 17:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order confirmation notice from Dell for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Product Order Email Messages Notification Email Messages on April 16, 2014

Medium Alert ID: 33833 First Published: 2014 April 17 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a malicious product order notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Order Quote Request Notice Email Messages on April 14, 2014

Medium Alert ID: 33796 First Published: 2014 April 14 19:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quote request for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Product Order Sample Email Messages on March 24, 2014

Medium Alert ID: 33493 First Published: 2014 March 25 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on March 20, 2014.

Medium Alert ID: 33453 First Published: 2014 March 21 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on March 9, 2014

Medium Alert ID: 33245 First Published: 2014 March 10 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Product Order Delivery Information Email Messages on February 16, 2014

Medium Alert ID: 32882 First Published: 2014 February 17 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product order details for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on January 14, 2014

Medium Alert ID: 32441 First Published: 2014 January 15 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Order Inquiry Email Messages on January 2, 2014

Medium Alert ID: 32315 First Published: 2014 January 3 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order inquiry for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Product Order Email Messages on December 25, 2013

Severity Alert ID: 32286 First Published: 2014 January 2 14:21 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on December 25, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on September 14, 2014

Medium Alert ID: 32261 First Published: 2013 December 23 13:39 GMT Last Updated: 2014 September 16 12:31 GMT Version: 69 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the ema...

Threat Outbreak Alert: Fake Product Order Email Messages on November 14, 2013

Medium Alert ID: 31712 First Published: 2013 November 11 19:47 GMT Last Updated: 2013 November 15 16:11 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the emai...