Advisories · Technology
ThemeFusion Fusion Builder.
Every CVE that names ThemeFusion Fusion Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability
- ThemeFusion Fusion Builder
- Privilege escalation
- CVSS 7.7 High
WordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability
- ThemeFusion Fusion Builder
- Path traversal
- CVSS 8.8 High
WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability
- ThemeFusion Fusion Builder
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability
- ThemeFusion Fusion Builder
- Insecure deserialization
- CVSS 7.1 High
WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability
- ThemeFusion Fusion Builder
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability
- ThemeFusion Fusion Builder
- Broken access control
- CVSS 6.5 Medium
WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability
- ThemeFusion Fusion Builder
- Broken access control
- CVSS 6.5 Medium
WordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability
- ThemeFusion Fusion Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Fusion Builder plugin <= 3.13.2 - Cross Site Scripting (XSS) vulnerability
- ThemeFusion Fusion Builder
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
WordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability
- ThemeFusion Fusion Builder
- Broken access control
- CVSS 8.5 High
WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability
- ThemeFusion Fusion Builder
- SQL injection
- CVSS 7.1 High
WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability
- ThemeFusion Fusion Builder
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability
- ThemeFusion Fusion Builder
- Cross-site scripting (XSS)