| CVE-2026-56008 |
Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions
|
8.8
Élevée
|
26 juin 2026 |
| CVE-2026-54193 |
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions
|
7.7
Élevée
|
17 juin 2026 |
| CVE-2026-12256 |
Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object…
|
8.8
Élevée
|
16 juin 2026 |
| CVE-2026-54194 |
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions
|
9.8
Critique
|
16 juin 2026 |
| CVE-2026-32542 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
7.1
Élevée
|
25 mars 2026 |
| CVE-2026-32451 |
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly…
|
6.5
Moyenne
|
13 mars 2026 |
| CVE-2026-32452 |
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly…
|
5.3
Moyenne
|
13 mars 2026 |
| CVE-2026-25472 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
6.5
Moyenne
|
19 févr. 2026 |
| CVE-2025-49940 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
6.5
Moyenne
|
22 oct. 2025 |
| CVE-2024-5628 |
The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site…
|
6.4
Moyenne
|
13 sept. 2024 |
| CVE-2023-39310 |
Missing Authorization vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through…
|
5.4
Moyenne
|
19 juin 2024 |
| CVE-2023-39309 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion…
|
8.5
Élevée
|
28 mars 2024 |
| CVE-2023-39311 |
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from…
|
7.1
Élevée
|
27 mars 2024 |
| CVE-2023-39306 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion…
|
7.1
Élevée
|
27 mars 2024 |