Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
Avada (Fusion) Builder ≤7.16.1 has a CRITICAL vuln: unauthenticated attackers can trigger arbitrary WP action hooks, causing data loss or DoS. Avoid risky forms until patched. https://radar.offseq.com/threat/cve-2026-97670-cwe-94-improper-control-of-generation-of-code-code-injection-in-themefusio...
https://radar.offseq.com/threat/cve-2026-97670-cwe-94-improper-control-of-generation-of-code-code-injection-in-themefusion-avada-f8cd8b04809f86cf
2026-10-10T06:00:27.453Z