CVE-2025-49940

The Fusion Builder plugin for WordPress contains a security flaw that allows malicious users with at least contributor privileges to insert unauthorized code into the site's content. This vulnerability arises from inadequate filtering of input data and failure to properly prevent potentially hazardous output. As a result, when a user views a compromised page, the embedded script will be executed.

Based on public CVE data (MITRE/NVD).