CVE-2026-56008

19th percentile — higher than 19% of all known CVEs

The Fusion Builder plugin for WordPress versions 3.15.4 and earlier contains a privilege escalation vulnerability exploitable by contributors. An attacker with contributor role can gain unauthorized access to administrative functions.

The organization risks unauthorized control over website content and settings by low-privileged users, potentially leading to page defacement, malicious code injection, or full site takeover.

Immediately update Fusion Builder to version 3.15.5 or later. Audit user accounts with contributor role and restrict their permissions to the minimum necessary.