{"vulnerability": "cve-2026-1843", "sightings": [{"uuid": "6992fd48-6933-44ca-b631-4f6e23e68d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1843", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116068163886097864", "content": "", "creation_timestamp": "2026-02-14T09:00:32.101814Z"}, {"uuid": "733f485b-d50d-42b6-9313-72305b2b38c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1843", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mesnu4u5c72a", "content": "", "creation_timestamp": "2026-02-14T09:00:32.183550Z"}, {"uuid": "b6cd5825-2128-445d-94cc-e477ed98fcc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aql7cxekcqahl", "content": "CVE-2026-18435 - Kadence Blocks\nCVE ID : CVE-2026-18435\n \n Published : Aug. 1, 2026, 9:17 a.m. | 32\u00a0minutes ago\n \n Description : The Kadence Blocks \u2014 Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'toggleIcon' Bl...", "creation_timestamp": "2026-08-01T10:20:25.945983Z"}, {"uuid": "ada06d77-1cb0-4643-9553-5c9ad59cf0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzamokip2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-18435 \u0432 Kadence Blocks: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0431\u043b\u043e\u043a toggleIcon\n\n\n\nhttps://kripta.biz/posts/21045193-FD26-4FC9-9E0B-62DDBBB5B617", "creation_timestamp": "2026-08-01T17:40:31.567741Z"}, {"uuid": "a15f63e3-85cd-4ab1-8731-f4fd209ae110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24zda4ki22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-18435 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kadence Blocks \u0434\u043b\u044f WordPress: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\n\n\n\nhttps://kripta.biz/posts/E634DA34-5D5C-4FCA-A24A-CC0A0645A7A2", "creation_timestamp": "2026-08-01T18:48:05.332529Z"}, {"uuid": "85ac33dd-9375-4405-b1fb-1109b8f209cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms252336k524", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea CVE-2026-18435: \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df Kadence Blocks \u05dc\u05d1\u05e0\u05d9\u05d9\u05ea \u05e2\u05de\u05d5\u05d3\u05d9\u05dd \u05d1\u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1\n\n\n\nhttps://khesef.xyz/posts/88460F2D-D979-40DE-8CFE-3F6A690AEF76", "creation_timestamp": "2026-08-01T18:48:26.425304Z"}, {"uuid": "d24bcf58-f503-43ec-9656-76b93e2164f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18432", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105074151013340", "content": "CVE-2026-18432 (CVSS 9.8): CRITICAL privilege escalation in DynamiApps Frontend Admin <=3.29.9. Unauthenticated attackers can become admins via flawed user ID checks. Restrict access to vulnerable forms & endpoints. https://radar.offseq.com/threat/cve-2026-18432-cwe-269-improper-privilege-management-in-shabti-frontend-admin-by-dynamiapps-0c7e8a2e9b4496ea #OffSeq #WordPress #PrivilegeEscalation #CVE", "creation_timestamp": "2026-08-16T12:00:25.522146Z"}, {"uuid": "affa3f16-7b13-4c7c-8aae-22440b36b4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18432", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt75addh2j24", "content": "Critical flaw in DynamiApps Frontend Admin <=3.29.9 lets unauthenticated users escalate to admin via improper privilege checks. Restrict vulnerable endpoints & avoid public forms until patched. https://radar.offseq.com/threat/cve-2026-18432-cwe-269-improper-privilege-management-in-shabti-frontend...", "creation_timestamp": "2026-08-16T12:00:27.652629Z"}, {"uuid": "d7ec1db0-fce5-4ea0-a53c-d67c413acf80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18438", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4jfk7bhm2z", "content": "\ud83d\udfe0 CVE-2026-18438 - High (8.8)\n\nThe Templately \u2013 Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And C...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18438/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T11:00:08.616745Z"}, {"uuid": "1ca12cf2-3de7-48f6-8db3-c7dbb0520916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18438", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt4pogh5l72v", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cTemplately\u300d\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u304c\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u8106\u5f31\u6027\u3002\nCVE-2026-18438 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-15T12:52:28.171303Z"}, {"uuid": "9105dd34-67ff-4a35-b86f-998ceacc6565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18433", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m", "content": "\ud83d\udd17 CVE : CVE-2025-9486, CVE-2026-15216, CVE-2026-15217, CVE-2026-15423, CVE-2026-16494, CVE-2026-16627, CVE-2026-18244, CVE-2026-18433, CVE-2026-19228, CVE-2026-4879, CVE-2026-6821, CVE-2026-7427, CVE-2026-8667", "creation_timestamp": "2026-08-13T14:05:08.156855Z"}, {"uuid": "61ea0c19-8fe9-4cf6-9878-917e5bbe6497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18432", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt6ik2sv4v2e", "content": "CVE-2026-18432\nThe Frontend Admin plugin for WordPress has a security flaw that lets attackers gain access to administrator accounts. This can happen when a malicious user submits a specially crafted form on the website. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-16T05:50:05.349868Z"}, {"uuid": "3750d5f4-9b59-46e7-adb6-deeefc2cf71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18432", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j4muboc22", "content": "\ud83d\udd34 CVE-2026-18432 - Critical (9.8)\n\nThe Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18432/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-16T06:00:28.538292Z"}, {"uuid": "30b19e20-8c49-4406-92e8-c6a989ba4373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8553", "content": "\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 Avada \u0434\u043b\u044f WordPress \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e PHP-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u0448\u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0430\u0442\u0430\u043a\u0443 ZeroClick \u0438 \u0432\u0441\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434 CVE-2026-18431, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,8.\n\n\u0410\u0442\u0430\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0433\u0440\u0430\u043d\u0438\u0446 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e PHP-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442 \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u043e\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u0438\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCVE-2026-18431 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Avada \u0434\u043e 7.16 \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 Fusion Builder \u0434\u043e 3.16.\n\nThemeFusion, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Avada \u0438 Fusion Builder, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Wordfence \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043b\u0430\u0433 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043b\u0438\u0448\u044c \u043e\u0431\u0437\u043e\u0440 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Avada \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 Fusion Builder \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0430\u0439\u0442\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wordfence \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442, \u0447\u0442\u043e Fusion Builder \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c \u0434\u043b\u044f \u0442\u0435\u043c\u044b Avada.\n\n\u0421\u0430\u043c\u0430 Avada - \u043e\u0447\u0435\u043d\u044c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0441 \u0431\u043e\u043b\u0435\u0435 1 \u043c\u043b\u043d. \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438, \u0430 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Fusion Builder \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0435\u0439, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043d\u0435 \u0441\u0443\u0436\u0430\u044e\u0442 \u043a\u0440\u0443\u0433 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439. \u041b\u044e\u0431\u043e\u0439 \u0441\u0430\u0439\u0442 \u0441 Avada \u0431\u0443\u0434\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439.\n\nWordfence \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0448\u0435\u0441\u0442\u0438\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0430\u0433\u0435\u043d\u0442\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Argus, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438 \u0432\u0441\u0435 \u044d\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0437\u0430 \u0434\u0432\u0430 \u0447\u0430\u0441\u0430.\n\nArgus \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 30 \u0438\u044e\u043b\u044f, \u0430 5 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443. ThemeFusion \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 10 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 jgthfnbdyj \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 Avada 7.16.1 \u0438 Fusion Builder 3.16.1.", "creation_timestamp": "2026-08-28T00:00:10.742675Z"}, {"uuid": "2e1e3f19-376c-4589-b555-794531405178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtytdkid452a", "content": "CVE-2026-18431 - Critical Unauthenticated RCE in WordPress Avada theme & Fusion Builder via arbitrary file write. CVSS 9.8. Unpatched. Mitigate immediately. #CVE #WordPress #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-18431/", "creation_timestamp": "2026-08-26T17:12:31.003968Z"}, {"uuid": "61ecf426-d25b-40fc-942f-3ced645d0bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117162924477288099", "content": "CVE-2026-18431 - Critical Unauthenticated RCE in WordPress Avada theme & Fusion Builder via arbitrary file write. CVSS 9.8. Unpatched. Mitigate immediately. #CVE #WordPress #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-18431/", "creation_timestamp": "2026-08-26T17:12:31.926415Z"}, {"uuid": "5f27090b-d4a5-48e8-9c13-d183f27bd61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.304693Z"}, {"uuid": "08ce1dc5-9954-4bc6-a5c5-44f320e8a3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:05.106412Z"}, {"uuid": "5ccc9398-2643-4745-a68f-15a166a4b79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtzd64u6oc2u", "content": "\ud83e\udd16 CVE-2026-18431 (CVSS 9.8): zero-click RCE chain in the Avada WordPress theme. Unauthenticated attackers chain six flaws to run arbitrary PHP code.\nhttps://www.bleepingcomputer.com/news/security/critical-avada-wordpress-theme-flaw-enables-zero-click-rce/", "creation_timestamp": "2026-08-26T21:55:48.659561Z"}, {"uuid": "96d5b4d8-0eb1-4568-bb45-739376486406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://t.me/GithubRedTeam/99890", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18431\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 03:28:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-18431 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:01:00.651219Z"}, {"uuid": "152ff626-9102-4973-b267-61122f429ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18431", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mu6q3g6pm32m", "content": "Avada WordPress Theme Patches Critical Zero-Click RCE https://0daynews.com/articles/2026-08-27-avada-wordpress-zero-click-rce-cve-2026-18431", "creation_timestamp": "2026-08-29T01:30:19.353801Z"}, {"uuid": "155b01e7-8ce1-4a78-a36c-7c16cd8a820a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117164037926963094", "content": "\ud83e\udd16 CVE-2026-18431 (CVSS 9.8): zero-click RCE chain in the Avada WordPress theme. Unauthenticated attackers chain six flaws (auth bypass, input validation, file handling) to execute arbitrary PHP code on the server. Affects Avada \u2264 7.16 and Fusion Builder \u2264 3.16; patch available.\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/critical-avada-wordpress-theme-flaw-enables-zero-click-rce/#CVE #WordPress #RCE #CyberSec", "creation_timestamp": "2026-08-27T02:21:07.477325Z"}, {"uuid": "d1404f59-bbb4-4e8f-ace2-7f1ce5527734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://t.me/true_secator/8553", "content": "\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0442\u0435\u043c\u0435 Avada \u0434\u043b\u044f WordPress \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e PHP-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u0448\u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0430\u0442\u0430\u043a\u0443 ZeroClick \u0438 \u0432\u0441\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434 CVE-2026-18431, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,8.\n\n\u0410\u0442\u0430\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0433\u0440\u0430\u043d\u0438\u0446 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e PHP-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442 \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u043e\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u0438\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCVE-2026-18431 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Avada \u0434\u043e 7.16 \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 Fusion Builder \u0434\u043e 3.16.\n\nThemeFusion, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Avada \u0438 Fusion Builder, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Wordfence \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043b\u0430\u0433 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043b\u0438\u0448\u044c \u043e\u0431\u0437\u043e\u0440 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Avada \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 Fusion Builder \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0430\u0439\u0442\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wordfence \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442, \u0447\u0442\u043e Fusion Builder \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c \u0434\u043b\u044f \u0442\u0435\u043c\u044b Avada.\n\n\u0421\u0430\u043c\u0430 Avada - \u043e\u0447\u0435\u043d\u044c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0441 \u0431\u043e\u043b\u0435\u0435 1 \u043c\u043b\u043d. \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438, \u0430 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Fusion Builder \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0435\u0439, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043d\u0435 \u0441\u0443\u0436\u0430\u044e\u0442 \u043a\u0440\u0443\u0433 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439. \u041b\u044e\u0431\u043e\u0439 \u0441\u0430\u0439\u0442 \u0441 Avada \u0431\u0443\u0434\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439.\n\nWordfence \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0448\u0435\u0441\u0442\u0438\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0430\u0433\u0435\u043d\u0442\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Argus, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438 \u0432\u0441\u0435 \u044d\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0437\u0430 \u0434\u0432\u0430 \u0447\u0430\u0441\u0430.\n\nArgus \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 30 \u0438\u044e\u043b\u044f, \u0430 5 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443. ThemeFusion \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 10 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 jgthfnbdyj \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 Avada 7.16.1 \u0438 Fusion Builder 3.16.1.", "creation_timestamp": "2026-08-27T20:00:05.444525Z"}, {"uuid": "e2d9c424-3d02-4230-befe-d065fc0f2d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu26kymeoz2y", "content": "\ud83e\udd16 CVE-2026-18431 (CVSS 9.8): six chained flaws in Avada theme + Fusion Builder enable zero-click unauth RCE. Avada \u22647.16 / Fusion \u22643.16, 1M+ sales. Patched; PoC withheld.\nhttps://www.bleepingcomputer.com/news/security/critical-avada-wordpress-theme-flaw-enables-zero-click-rce/", "creation_timestamp": "2026-08-27T06:06:11.441933Z"}, {"uuid": "610adcaf-88ba-4e8c-ac41-edae5dade71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18431", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mu275jzsez2o", "content": "\ud83d\udcf0 Celah Kritis Tema WordPress Avada Memungkinkan Serangan Zero-Click RCE\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/27/celah-kritis-tema-wordpress-avada-memungkinkan-serangan-zero-click-rce/\n\n#avadaTheme #cmsWordpress #cve-2026-18431 #fusionBuilder #keamananSiber #rce #remo", "creation_timestamp": "2026-08-27T06:16:34.034103Z"}, {"uuid": "c4045995-e193-4bde-9f93-3791a76737d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://t.me/GithubRedTeam/99890", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18431\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 03:28:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-18431 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T07:00:04.030048Z"}, {"uuid": "b505485b-a315-41b2-95c3-4653ae37749e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18431", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mu6xmtd3mr2k", "content": "Avada WordPress Theme Patches Critical Zero-Click RCE \u2014 ThemeFusion patches a six-flaw chain in Avada and Fusion Builder that lets unauthenticated attackers execute arbitrary PHP code. CVSS 9.8 Critical. https://0daynews.com/articles/2026-08-27-avada-wordpress-zero-click-rce-cve-2026-18431", "creation_timestamp": "2026-08-29T03:45:15.766891Z"}]}