Skip to content

CVE-2026-4798

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
May 15, 2026
Last Seen
May 15, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Avada Builder Plugin Expose WordPress Sites to Credential Theft72.0

Two vulnerabilities in the Avada Builder plugin for WordPress, affecting approximately one million installations, allow unauthorized access to sensitive data. The first vulnerability enables hackers to read arbitrary files, including wp-config.php, which contains critical database credentials. The s...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Sql InjectionData BreachAvadaWordfenceCWE-200 - Exposure of Sensitive InformationCwe-89 - SQL InjectionCWE-22 - Path TraversalT1190 - Exploit Public-Facing ApplicationT1567 - Exfiltration Over Web ServiceWordPressAvada BuilderWooCommerce