| CVE-2026-56008 |
Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions
|
8.8
High
|
Jun 26, 2026 |
| CVE-2026-54193 |
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions
|
7.7
High
|
Jun 17, 2026 |
| CVE-2026-12256 |
Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object…
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-54194 |
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions
|
9.8
Critical
|
Jun 16, 2026 |
| CVE-2026-32542 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
7.1
High
|
Mar 25, 2026 |
| CVE-2026-32451 |
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly…
|
6.5
Medium
|
Mar 13, 2026 |
| CVE-2026-32452 |
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly…
|
5.3
Medium
|
Mar 13, 2026 |
| CVE-2026-25472 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
6.5
Medium
|
Feb 19, 2026 |
| CVE-2025-49940 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
6.5
Medium
|
Oct 22, 2025 |
| CVE-2024-5628 |
The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site…
|
6.4
Medium
|
Sep 13, 2024 |
| CVE-2023-39310 |
Missing Authorization vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through…
|
5.4
Medium
|
Jun 19, 2024 |
| CVE-2023-39309 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion…
|
8.5
High
|
Mar 28, 2024 |
| CVE-2023-39311 |
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from…
|
7.1
High
|
Mar 27, 2024 |
| CVE-2023-39306 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
7.1
High
|
Mar 27, 2024 |