1M WordPress Sites at Risk: Critical Unauthenticated Arbitrary File Deletion in Avada Builder (CVSS 9.1)

· Securityonline · June 19, 2026, 7:49 a.m.
Wordpress Wordfence Vulnerability Report Arbitrary File Deletion Wordpress Security Vulnerabilities Avada Builder
Summary
This blog post highlights a serious vulnerability in the Avada Builder affecting approximately one million WordPress sites, urging users to take immediate action to patch their systems due to the risk of unauthenticated arbitrary file deletion.
Read full post on securityonline.info →
AUTHOR
Sponsored
Zulip logo Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →