CVE-2026-84938 | mefusion Avada Builder Plugin up to 3.16.1 on WordPress Media Upload cross site scripting

A vulnerability identified as problematic has been detected in mefusion Avada Builder Plugin up to 3.16.1 on WordPress. This affects an unknown part of the component Media Upload. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-84938. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More