CVE-2026-54193
HighCVSS 7.7Summary
In Fusion Builder versions <= 3.15.4, there is a vulnerability that allows arbitrary file deletion by users with appropriate permissions.
Risk Assessment
An attacker could exploit this vulnerability to delete critical files, potentially leading to data loss and disruption of application functionality.
Recommendation
It is recommended to update Fusion Builder to the latest version to mitigate this vulnerability.
Other vulnerabilities in Fusion Builder
See all- CVE-2026-54194Critical
Fusion Builder versions up to 3.15.4 are vulnerable to PHP Object Injection, which may lead to unauthorized access or data manipulation.
- CVE-2026-56008High
The Fusion Builder plugin for WordPress versions 3.15.4 and earlier contains a privilege escalation vulnerability exploitable by contributors. An attacker with contributor role can gain unauthorized access to administrative functions.
Original NVD description (English source)
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.