Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Fusion Builder — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Fusion Builder, with AI-generated Chinese analysis, references, and POCs.

This page serves as a centralized vulnerability aggregation resource for the Fusion Builder product, focusing on common weakness types and associated security tags. It compiles a comprehensive list of known vulnerabilities affecting this specific WordPress page builder plugin, including issues related to cross-site scripting, improper access control, and insecure default configurations. The data presented spans from the plugin’s initial release through recent updates, ensuring that both historical and emerging threats are documented for thorough analysis. By utilizing this collection, security researchers and administrators can efficiently track vendor advisories and correlate reported flaws with specific development releases. Users can gain a deeper understanding of prevalent weakness classes within the context of this popular web design tool, allowing them to prioritize remediation efforts based on severity and exploitability. Additionally, the page provides a detailed view of the product’s vulnerability history, enabling teams to identify patterns in defect injection and assess the overall security maturity of the software over time. This structured approach facilitates better risk management by consolidating disparate reports into a single, accessible reference point. The information supports informed decision-making regarding updates, patches, and alternative solutions, helping organizations mitigate potential exposure to known exploits. This resource is intended for technical stakeholders who require accurate, timeline-based insights into the security posture of Fusion Builder without relying on fragmented or unverified sources.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-56008 WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability CWE-266 8.8 High2026-06-26
CVE-2026-54193 WordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability CWE-22 7.7 High2026-06-17
CVE-2026-54194 WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability CWE-502 9.8 Critical2026-06-16
CVE-2026-32542 WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-03-25
CVE-2026-32452 WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability CWE-862 5.3 Medium2026-03-13
CVE-2026-32451 WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability CWE-862 6.5 Medium2026-03-13
CVE-2026-25472 WordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2026-02-19
CVE-2025-49940 WordPress Fusion Builder plugin <= 3.13.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-10-22
CVE-2023-39310 WordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability CWE-862 5.4 Medium2024-06-19
CVE-2023-39309 WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability CWE-89 8.5 High2024-03-28
CVE-2023-39311 WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 7.1 High2024-03-27
CVE-2023-39306 WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-03-27
CVE-2022-1386 Fusion Builder < 3.6.2 - Unauthenticated SSRF CWE-918 9.1 -2022-05-16

All 13 known CVE vulnerabilities affecting Fusion Builder with full Chinese analysis, references, and POCs where available.