Themefusion Fusion Builder vulnerabilities
13 vulnerabilities
Known vulnerabilities in Themefusion Fusion Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-49940themefusionfusion builder+1
EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows DOM-Based XSS.This issue affects Fusion Builder: from n/a through <= 3.13.2.CVE-2026-54193themefusionfusion builder+1EPSS score0.47%
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.CVE-2026-54194themefusionfusion builder+1EPSS score0.56%
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.CVE-2026-25472themefusionfusion builder+1EPSS score0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Stored XSS.This issue affects Fusion Builder: from n/a through <= 3.14.1.CVE-2026-56008themefusionfusion builder+1EPSS score0.42%
Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.CVE-2026-32451themefusionfusion builder+1EPSS score0.26%
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.CVE-2026-32542themefusionfusion builder+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through < 3.15.0.CVE-2026-32452themefusionfusion builder+1EPSS score0.30%
Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.CVE-2026-12256themefusionfusion builder+1EPSS score0.47%
Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3.CVE-2023-39309avadafusion_builder+2EPSS score0.74%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.CVE-2023-39306themefusionfusion builder+1EPSS score0.39%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through 3.11.1.CVE-2023-39310themefusionfusion builder+1EPSS score0.46%
Missing Authorization vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.CVE-2023-39311avadafusion_builder+2EPSS score0.26%
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.