Known vulnerabilities in the Fusion Builder plugin
14 security advisories have been published for the Fusion Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Fusion Builder - Privilege Escalation (CVE-2026-56008) HIGH
- Fusion Builder - Remote Code Execution (CVE-2026-8713) CRITICAL
- Fusion Builder - Security Vulnerability (CVE-2026-54193) HIGH
- Fusion Builder - PHP Object Injection (CVE-2026-54194) CRITICAL
- Fusion Builder - PHP Object Injection (CVE-2026-12256) HIGH
- Fusion Builder - Remote Code Execution (CVE-2026-6279) CRITICAL
- Fusion Builder - Cross-Site Scripting (XSS) (CVE-2026-32542) HIGH
- Fusion Builder - Broken Access Control (CVE-2026-32451) MEDIUM
- Fusion Builder - Broken Access Control (CVE-2026-32452) MEDIUM
- Fusion Builder - Cross-Site Scripting (XSS) (CVE-2026-25472) MEDIUM
- Fusion Builder - Cross-Site Scripting (XSS) (CVE-2025-49940) MEDIUM
- Fusion Builder - SQL Injection (CVE-2023-39309) HIGH
- Fusion Builder - Cross-Site Request Forgery (CSRF) (CVE-2023-39311) HIGH
- Fusion Builder - Broken Access Control (CVE-2022-1386) CRITICAL