https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T07:24:07.717481+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-283530 EUVD-2026-283530 2026-10-10T07:24:07.719455+00:00 EUVD-2026-283530 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12335 fkie_cve-2024-12335 2026-10-10T07:24:07.719491+00:00

The Avada (Fusion) Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handle_clone_post() function and the 'fusion_blog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.

 https://cve.radiocsirt.org/vuln/ghsa-r4xp-gcm2-3943 GHSA-r4xp-gcm2-3943 2026-10-10T07:24:07.719538+00:00

The Avada (Fusion) Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handle_clone_post() function and the 'fusion_blog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.