Very Good Plugins

Products

ProductCVEsExploitedLatest
WP Fusion Lite2–Aug 9, 2021
Fatal Error Notify1–Apr 16, 2024
WP Fusion (Pro)1–Sep 7, 2026

Exploited and recent CVEs

  • CVE-2026-14444 High 7.5 WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter 0.4%
  • CVE-2024-32455 Medium 4.3 WordPress Fatal Error Notify plugin <= 1.5.2 - Broken Access Control vulnerability 0.3%
  • CVE-2021-34660 Medium 6.1 WP Fusion Lite <= 3.37.18 Reflected Cross-Site Scripting 0.8%
  • CVE-2021-34661 Medium 6.1 WP Fusion Lite <= 3.37.18 Cross-Site Request Forgery to Data Deletion 0.4%