Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
VerygoodpluginsWp Fusion

2 matches found

CVE
CVE•added 2021/08/09 12:23 p.m.•64 views

CVE-2021-34660

WP Fusion Lite WordPress plugin is affected by CVE-2021-34660. The vulnerability is a Reflected Cross-Site Scripting via the startdate parameter in the file ~/includes/admin/logging/class-log-table-list.php, affecting versions up to 3.37.18. The impact is injection of arbitrary web scripts in an ...

6.1CVSS6AI score0.00823EPSS
Web
CVE
CVE•added 2021/08/09 12:23 p.m.•43 views

CVE-2021-34661

The CVE-2021-34661 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WP Fusion Lite WordPress plugin, affecting the show_logs_section function in ~/includes/admin/logging/class-log-handler.php. It allows an attacker to drop all plugin logs for versions up to and including 3...

6.1CVSS5AI score0.00452EPSS