What is GHSA-vmmh-jvfw-c7h2?

GHSA-vmmh-jvfw-c7h2 is a security advisory published by GitHub Security Advisories with Medium severity. The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the...

Which CVE IDs does GHSA-vmmh-jvfw-c7h2 cover?

GHSA-vmmh-jvfw-c7h2 covers the following CVE IDs: CVE-2026-121759. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vmmh-jvfw-c7h2?

GHSA-vmmh-jvfw-c7h2 has a CVSS v3 base score of 4.9, published by GitHub Security Advisories.

GHSA-vmmh-jvfw-c7h2MediumCVSS 4.9

The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the...

Vendor

GitHub Security Advisories

Published

November 9, 2026

Last Modified

November 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-121759 →

📋 Description

The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the trash, which could allow users with a role as low as Contributor to trash arbitrary posts and pages, or delete them permanently where the trash is disabled.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-121759
https://wpscan.com/vulnerability/df86f132-208c-4ba4-bf90-cc59b123f610
https://github.com/advisories/GHSA-vmmh-jvfw-c7h2