CVE · Medium

CVE-2026-32453 — Fusion Core [fusion-core] < 5.15.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-32453 Fusion Core [fusion-core] < 5.15.0 Missing Authorization Medium 5.3 < 5.15.0 5.15.0 2026-03-10

CVE-2026-32453

A flaw exists in the Avada Core plugin, enabling unverified individuals to bypass security checks and execute an illicit operation. The issue stems from an oversight in capability verification within a specific function across all versions prior to 5.15.0. This vulnerability allows unauthorized access to sensitive areas of the website.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.