WordPress Fusion Vulnerabilities
Wordpress Fusion vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Arbitrary Shortcode Execution in Avada Builder Plugin for WordPress
CVE-2024-13345WordPressAvada (fusion) Builder9.8CRITICALStored Cross-Site Scripting Vulnerability in Avada Builder Plugin for WordPress
CVE-2024-12477WordpressAvada (fusion) Builder5.4MEDIUMInformation Exposure Vulnerability in Avada Builder Plugin for WordPress
CVE-2024-12335WordpressAvada (fusion) Builder4.3MEDIUMStored Cross-Site Scripting Vulnerability in Agency Dominion Fusion
CVE-2024-37962WordPressFusion6.5MEDIUMStored Cross-Site Scripting Vulnerability Affects Avada Website Builder
CVE-2024-5628WordpressFusion Builder5.4MEDIUMWordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability
CVE-2023-39310WordPressFusion Builder5.4MEDIUMInsertion of Sensitive Information into Log File Vulnerability Affects WP Fusion Lite
CVE-2024-32796WordPressWP Fusion Lite4.3MEDIUMWordPress WP Fusion Lite plugin <= 3.41.24 - Auth. Remote Code Execution (RCE) vulnerability
CVE-2024-27972WordPressWP Fusion Lite👾🟡EPSS 49%9.9CRITICALFusion Builder Vulnerable to SQL Injection
CVE-2023-39309WordPressFusion Builder8.5HIGHFusion Builder CSRF Vulnerability Affects Versions n/a through 3.11.1
CVE-2023-39311WordPressFusion Builder7.1HIGHFusion Builder Vulnerable to Reflected XSS
CVE-2023-39306WordPressFusion Builder7.1HIGHFusion Builder < 3.6.2 - Unauthenticated SSRF
CVE-2022-1386WordpressFusion Builder👾🟡EPSS 93%9.8CRITICALWP Fusion Lite <= 3.37.18 Cross-Site Request Forgery to Data Deletion
CVE-2021-34661WordpressWP Fusion Lite6.1MEDIUMWP Fusion Lite <= 3.37.18 Reflected Cross-Site Scripting
CVE-2021-34660WordpressWP Fusion Lite6.1MEDIUMArbitrary File Upload Vulnerability in Fusion Theme for WordPress
CVE-2015-2194WordpressFusion
13 February 2025
22 January 2025
25 December 2024
19 December 2024
13 September 2024
19 June 2024
24 April 2024
3 April 2024
28 March 2024
27 March 2024
16 May 2022
9 August 2021
3 March 2015
No more vulnerabilities to load.