Skip to content
OpenAdvisories

Product · ThemeFusion

Fusion Builder

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-32451

    WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.

    ThemeFusion Fusion Builder
  • Medium 5.3
    CVE-2026-32452

    WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.

    ThemeFusion Fusion Builder
  • Medium 6.5
    CVE-2026-25472

    WordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Stored XSS.This issue affects Fusion Builder: from n/a through <= 3.14.1.

    ThemeFusion Fusion Builder
  • Medium 6.5
    CVE-2025-49940

    WordPress Fusion Builder plugin <= 3.13.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows DOM-Based XSS.This issue affects Fusion Builder: from n/a through <= 3.13.2.

    ThemeFusion Fusion Builder
  • Medium 5.4
    CVE-2023-39310

    WordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

    ThemeFusion Fusion Builder