Aller au contenu
Se connecter
5.4 Moyenne

CVE-2026-90972 The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX…

Description

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Fusion Lite 3.48 premières → < 3.48.0 3.48.0

Autres CVE de WP Fusion Lite

Les 2 CVE de WP Fusion Lite →
CVE-2026-90974 The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs… 6.5 Moyenne
Suivre cette CVE