Now officially on WordPress.org

CVE Database / CVE-2023-39311

CVE · High

CVE-2023-39311 — Fusion Builder [fusion-builder] < 3.11.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-39311 Fusion Builder [fusion-builder] < 3.11.2 Cross-Site Request Forgery (CSRF) High 7.1 < 3.11.2 3.11.2 2023-08-10 —

CVE-2023-39311

The Fusion Builder plugin for WordPress contains a Cross-Site Request Forgery vulnerability in version 3.11.1 and earlier due to inadequate nonce verification in an unspecified function. An unauthenticated attacker could exploit this flaw to alter elements through third-party access tokens if they successfully deceive a site administrator into clicking a malicious link. The vulnerability was addressed in version 3.11.2.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings