Skip to content

Themefusion Fusion Builder vulnerabilities

themefusion fusion builder WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability CVE-2026-56008 8.8 HighJune 26, 2026
themefusion fusion builder WordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability CVE-2026-54193 7.7 HighJune 17, 2026
themefusion fusion builder WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability CVE-2026-12256 8.8 HighJune 16, 2026
themefusion fusion builder WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability CVE-2026-54194 9.8 CriticalJune 16, 2026
themefusion fusion builder WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-32542 7.1 HighMarch 25, 2026
themefusion fusion builder WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability CVE-2026-32452 5.3 MediumMarch 13, 2026
themefusion fusion builder WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability CVE-2026-32451 6.5 MediumMarch 13, 2026
themefusion fusion builder WordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-25472 6.5 MediumFebruary 19, 2026
themefusion fusion builder WordPress Fusion Builder plugin <= 3.13.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-49940 6.5 MediumOctober 22, 2025
themefusion fusion builder WordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability CVE-2023-39310 5.4 MediumJune 19, 2024
avada fusion builder WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability CVE-2023-39309 8.5 HighMarch 28, 2024
avada fusion builder WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2023-39311 7.1 HighMarch 27, 2024
themefusion fusion builder WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2023-39306 7.1 HighMarch 27, 2024
fusion builder project builder, theme-fusion avada, themefusion fusion builder +2 more Fusion Builder < 3.6.2 - Unauthenticated SSRF CVE-2022-1386 Public exploit EPSS 71.4% 9.8 CriticalMay 16, 2022