Description
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeFusion | Fusion Builder | ≤ 3.15.4 | — |
Critical · 9.8
CVE-2026-54194
EUVD-2026-37509GHSA-xj9q-5wm7-q8ww
WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack