Fusion Builder

Vulnerabilities 18Slug fusion-builder

Minimum safe version

3.15.2

Update to 3.15.2 or later to address 18 fixable vulnerabilities

Medium 5.4
2026-04-22< 3.15.2

Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Limited Arbitrary WordPress Action Execution

EUVDWordfenceCVE
Medium 4.3
2026-04-22< 3.15.2

Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Sensitive Information Exposure via Insecure Direct Object Reference

EUVDWordfenceCVE
Medium 6.4
2025-07-16< 3.12.2

Avada (Fusion) Builder <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

EUVDWordfenceCVE
Medium 6.4
2025-04-01< 3.11.15

Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2025-01-22< 3.11.12

CVE-2024-12477

CVEWordfence