CVE Intelligence

ThemeFusion Fusion Builder vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ThemeFusion Fusion Builder: 9 record(s), with affected versions and fixes.

CVE-2026-56008 High · 8.8 CWE-266 Jun 26, 2026
WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability
Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.
CVE-2026-54193 High · 7.7 CWE-22 Jun 17, 2026
WordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.
CVE-2026-54194 Critical · 9.8 CWE-502 Jun 17, 2026
WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.
CVE-2026-12256 High · 8.8 CWE-502 Jun 17, 2026
WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3.
CVE-2026-32542 High · 7.1 CWE-79 Mar 25, 2026
WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through < 3.15.0.
CVE-2026-32452 Medium · 5.3 CWE-862 Mar 13, 2026
WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.
CVE-2026-32451 Medium · 6.5 CWE-862 Mar 13, 2026
WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.
CVE-2026-25472 Medium · 6.5 CWE-79 Feb 19, 2026
WordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Stored XSS.This issue affects Fusion Builder: from n/a through <= 3.14.1.
CVE-2025-49940 Medium · 6.5 CWE-79 Oct 22, 2025
WordPress Fusion Builder plugin <= 3.13.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows DOM-Based XSS.This issue affects Fusion Builder: from n/a through <= 3.13.2.