The WP Fusion Lite WordPress plugin is vulnerable to Cross-Site Request Forgery via the `show_logs_section` function found in the ~/includes/admin/logging/class-log-handler.php file which allows attackers to drop all logs for the plugin, in versions up to and including 3.37.18.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Fusion Lite Plugin | — | Update wp-fusion-lite plugin to version 3.37.30, or a newer patched version | May 15, 2025 | Aug 6, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub