Log in Start free

fusewp

Products

ProductCVEsExploitedLatest
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.)3–Jul 30, 2026

Exploited and recent CVEs

  • CVE-2026-5582 Medium 4.3 FuseWP <= 1.1.24.2 - Cross-Site Request Forgery to Sync Rule Status Toggle 0.2%
  • CVE-2025-11975 Medium 4.3 FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Missing Authorization to Authenticated (Subscriber+) Sync Rule Creation 0.2%
  • CVE-2025-11976 Medium 4.3 FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Cross-Site Request Forgery to Sync Rule Creation 0.1%