Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Fusion Builder 3.11.1

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 10, 2023

The Fusion Builder plugin for WordPress has a security vulnerability that could allow someone with an account on the WordPress site to make unauthorized changes to data. This vulnerability affects versions of the plugin up to and including 3.11.1. Specifically, someone with an account on the site that has the least level of permissions (called a ‘subscriber’) could save Portfolio Permalinks without the necessary security checks in place.

Detected in:

Avada (Fusion) Builder fixed vulnerable versions:
Avada | Website Builder For WordPress & WooCommerce fixed vulnerable versions:
Fusion Builder fixed vulnerable versions: >= * <= 3.11.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.