Approved changes feed: RSS · Atom

cpe:2.3:a:themefusion:fusion_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThemefusion (cf6fb878-c09f-5ab4-bc75-139b7744bf3f)
ProductFusion Builder (7bf3c2ae-4da7-51ff-b533-0cd21473e22c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56008 vulnerable 2026-07-29 01:00:28.723519 WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability
HIGH (8.8)
Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.
Published: 2026-06-26T14:52:28.955Z
Updated: 2026-06-29T16:04:31.030Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54194 vulnerable 2026-07-29 01:00:27.630072 WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability
CRITICAL (9.8)
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.
Published: 2026-06-16T20:56:54.376Z
Updated: 2026-06-17T10:54:40.081Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54193 vulnerable 2026-07-29 01:00:27.629755 WordPress Fusion Builder plugin <= 3.15.4 - Arbitrary File Deletion vulnerability
HIGH (7.7)
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.
Published: 2026-06-17T12:47:17.708Z
Updated: 2026-06-17T15:38:27.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32542 vulnerable 2026-06-08 07:57:17.695974 WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through < 3.15.0.
Published: 2026-03-25T16:15:11.603Z
Updated: 2026-04-29T09:52:01.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32452 vulnerable 2026-06-08 07:57:17.606595 WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.
Published: 2026-03-13T11:42:21.652Z
Updated: 2026-04-29T09:51:59.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32451 vulnerable 2026-06-08 07:57:17.606169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25472 vulnerable 2026-06-08 07:53:19.847534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49940 vulnerable 2026-06-08 07:29:15.133228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39311 vulnerable 2026-06-08 06:09:37.016963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39310 vulnerable 2026-06-08 06:09:37.016298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39309 vulnerable 2026-06-08 06:09:37.014252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39306 vulnerable 2026-06-08 06:09:37.007415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.