Read the docs

Fusion Builder Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Fusion Builder Project records in CISA KEV

No Fusion Builder Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fusion Builder 1 record HIGH

Records

1 record

TI-2022-01267 CVE-2022-1386 · GHSA-4gm2-r6xm-jqxh

Fusion Builder < 3.6.2 - Unauthenticated SSRF

Priority HIGH 80

The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.71427 Published 2022-05-16 Fixed in 3.6.2 CWE-918
Open these records in search →