tag
Call_user_func
Critical
Sneeit Framework <= 8.3 Unauthenticated RCE via `call_user_func()` — Rogue Admin Creation (CVE-2025-6389)
CVE-2025-6389·
Sneeit Framework (WordPress theme framework plugin, sneeit-framework)
unpatched
Critical
Avada Builder Unauthenticated RCE via call_user_func() Allowlist Bypass (CVE-2026-6279)
CVE-2026-6279·
Avada Builder (Fusion Builder) WordPress theme/plugin
unpatched