CVE Database /
CVE-2026-56008
CVE · High
CVE-2026-56008 — Fusion Builder [fusion-builder] < 3.15.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-56008
|
Fusion Builder [fusion-builder] < 3.15.5 |
Incorrect Privilege Assignment |
High
8.8
|
< 3.15.5
|
3.15.5 |
2026-06-18 |
—
|
CVE-2026-56008
The Avada (Fusion) Builder plugin for WordPress contains a security flaw that allows certain users to gain elevated permissions. Specifically, contributors or higher can exploit this vulnerability to assume administrative control over the site. This issue affects all versions up to and including 3.15.4.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings