CVE-2021-34660

WP Fusion Lite WordPress plugin is affected by CVE-2021-34660. The vulnerability is a Reflected Cross-Site Scripting via the startdate parameter in the file ~/includes/admin/logging/class-log-table-list.php, affecting versions up to 3.37.18. The impact is injection of arbitrary web scripts in an ...

CVE-2021-34661

The CVE-2021-34661 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WP Fusion Lite WordPress plugin, affecting the show_logs_section function in ~/includes/admin/logging/class-log-handler.php. It allows an attacker to drop all plugin logs for versions up to and including 3...