Skip to content
OpenAdvisories

Product · ThemeFusion

Fusion Builder

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-56008

    WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability

    Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.

    ThemeFusion Fusion Builder
  • High 7.7
    CVE-2026-54193

    WordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability

    Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.

    ThemeFusion Fusion Builder
  • High 8.8
    CVE-2026-12256

    WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3.

    ThemeFusion Fusion Builder
  • High 7.1
    CVE-2026-32542

    WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through < 3.15.0.

    ThemeFusion Fusion Builder
  • High 8.5
    CVE-2023-39309

    WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

    ThemeFusion Fusion Builder
  • High 7.1
    CVE-2023-39311

    WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

    ThemeFusion Fusion Builder
  • High 7.1
    CVE-2023-39306

    WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through 3.11.1.

    ThemeFusion Fusion Builder