fusewp

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

fusewp records in CISA KEV

No fusewp vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-04893 CVE-2026-5582 · GHSA-hj2v-9cpv-vv4f

FuseWP <= 1.1.24.2 - Cross-Site Request Forgery to Sync Rule Status Toggle

LOW 19

The FuseWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.24.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00196 Published 2026-07-30 No fix listed CWE-352

TI-2025-10980 CVE-2025-11976 · GHSA-p4jw-m7hw-hjrg

Cross-site request forgery in FuseWP – WordPress User Sync to Email List & Marketing…

LOW 19

The FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00136 Published 2025-10-25 No fix listed CWE-352

TI-2025-10979 CVE-2025-11975 · GHSA-383x-8v44-m82q

Missing authorization in FuseWP – WordPress User Sync to Email List & Marketing Automation

LOW 19

The FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00208 Published 2025-10-31 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0