Fusion Builder vulnerabilities
We track 1 vulnerability in Fusion Builder products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Fusion Builder vulnerabilities
- 9.8 Critical severity
Fusion Builder: Server-Side Request Forgery
The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be