CVE-2026-4798 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

May 15, 2026

Last Seen

May 15, 2026

CVE-2026-4798 is a vulnerability tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 15, 2026; most recent activity May 15, 2026.

Related Threat Clusters

Critical Vulnerabilities in Avada Builder Plugin Expose WordPress Sites to Credential Theft
Two vulnerabilities in the Avada Builder plugin for WordPress, affecting approximately one million installations, allow unauthorized access to sensitive data. The first vulnerability enables hackers to read arbitrary…

4 articles · Updated May 15, 2026

Recent Intelligence Reports

Avada Builder WordPress plugin flaws allow site credential theft — Bleepingcomputer · May 15, 2026
Avada Builder WordPress plugin flaws allow site credential theft — Bleepingcomputer · May 15, 2026

Related Entities

Data Breach Sql Injection Avada Wordfence CWE-200 - Exposure of Sensitive Information CWE-22 - Path Traversal Cwe-89 - SQL Injection T1190 - Exploit Public-Facing Application T1567 - Exfiltration Over Web Service Avada Builder WooCommerce WordPress