fusion_builder 漏洞

严重CVE-2026-87132026/07/28

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybe_delete_files function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the file_path parameter in the fusion_form_maybe_delete_files AJAX action. Deleting critical files like wp-config.php can lead to complete site takeover via reinstallation. This template detects the vulnerable version via homepage asset URL versioning (primary) and readme.txt Stable tag (fallback).

fusion_builderPoC 已收录

CVSS—

严重CVE-2022-13862022/05/16

WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery

WordPress Fusion Builder plugin before 3.6.2 is susceptible to server-side request forgery. The plugin does not validate a parameter in its forms, which can be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. An attacker can potentially interact with hosts on the server's local network, bypass firewalls, and access control measures.

fusion_builderPoC 已收录

CVSS9.8EPSS 93.3%

fusion_builder

关联漏洞

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery