{"uuid": "155b01e7-8ce1-4a78-a36c-7c16cd8a820a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117164037926963094", "content": "\ud83e\udd16 CVE-2026-18431 (CVSS 9.8): zero-click RCE chain in the Avada WordPress theme. Unauthenticated attackers chain six flaws (auth bypass, input validation, file handling) to execute arbitrary PHP code on the server. Affects Avada \u2264 7.16 and Fusion Builder \u2264 3.16; patch available.\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/critical-avada-wordpress-theme-flaw-enables-zero-click-rce/#CVE #WordPress #RCE #CyberSec", "creation_timestamp": "2026-08-27T02:21:07.477325Z"}