CVE-2026-121759
MEDIUM
NVD
CVSS Score
4.9
Severity
MEDIUM
Published
Nov 09, 2026
Vendor
unknown
Description
The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the trash, which could allow users with a role as low as Contributor to trash arbitrary posts and pages, or delete them permanently where the trash is disabled.