CVE-2023-39311

CVE-2023-39311 is a CSRF vulnerability in the WordPress plugin Fusion Builder (Fusion Builder). Affected versions are Fusion Builder

CVE-2023-39309

CVE-2023-39309 is an authenticated SQL injection in ThemeFusion Fusion Builder for WordPress, affecting Fusion Builder versions up to 3.11.1. Root cause is improper neutralization of SQL elements used in an SQL command. Reported base CVSS/Basescore: 8.8 (HIGH) with network access, low attack comp...