Is CVE-2026-4798 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-4798 is not currently listed in the CISA KEV catalog.

Which frameworks does CVE-2026-4798 affect?

CVE-2026-4798 affects WordPress.

Vulnerability intelligence

CVE-2026-4798: Avada Builder SQL injection (CVSS 7.5)

CVE-2026-4798. CVSS 7.5. The best-selling WordPress theme of all time — 700,000+ sales — lets unauthenticated attackers extract hashed passwords from the database. You paid $69 for this.

CVSS 7.5 WordPress 2026

What WebPulse reported · 1 analysis

Avada Builder: WordPress's #1 Premium Theme Has an Unauthenticated SQL Injection

CVE-2026-4798. CVSS 7.5. The best-selling WordPress theme of all time — 700,000+ sales — lets unauthenticated attackers extract hashed passwords from the databa

June 13, 2026

View CVE-2026-4798 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-60137 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795 CVE-2026-3844 CVE-2026-1293 CVE-2026-87902