
CVE-2026-6279
CVE-2026-6279: Avada (Fusion) Builder <= 3.15.2 – Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode…
command-and-controlexploitationpayload-development+4

CVE-2026-6279: Avada (Fusion) Builder <= 3.15.2 – Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode…

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

Evince/xreader/Atril RCE exploit to CVE-2026-46529