CVE WATCH / VULNERABILITY DETAIL
CVE-2026-121759
MEDIUMCVSS 4.9NVD feed
Published 9 November 2026 · tracked since 9 November 2026
Description
The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the trash, which could allow users with a role as low as Contributor to trash arbitrary posts and pages, or delete them permanently where the trash is disabled.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124604 MEDIUM 6.2
- CVE-2026-124603 MEDIUM 6.2
- CVE-2026-124602 MEDIUM 6.2
- CVE-2026-124601 MEDIUM 6.2
- CVE-2026-124599 MEDIUM 6.2
- CVE-2026-124598 HIGH 7.5
- CVE-2026-109810 MEDIUM 6.1
- CVE-2026-109799 HIGH 7.5
- CVE-2026-109797 HIGH 7.1
- CVE-2026-107244 HIGH 7.6