{"affected":[{"defaultStatus":"unaffected","product":"Fusion Page Builder","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.7.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-121759","cwes":["CWE-639"],"description":"The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the trash, which could allow users with a role as low as Contributor to trash arbitrary posts and pages, or delete them permanently where the trash is disabled.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/df86f132-208c-4ba4-bf90-cc59b123f610/"}],"kev":null,"metrics":[],"modifiedAt":1794204027305,"publishedAt":1794204027305,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/df86f132-208c-4ba4-bf90-cc59b123f610/"}],"remediation":[],"revision":"6ab45e7a35b7b319ea7791e7f871f63e7e5a3f0e38e3ff8ac76acb2e21c981a9","sources":[{"modifiedAt":1794204027305,"name":"CNA: WPScan","retrievedAt":1794208114886,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121759"}],"ssvc":null,"status":"published","title":"Fusion Page Builder < 1.7.1 - Contributor+ Arbitrary Post Trashing via IDOR","updatedAt":1794208114886}