Is WP Fusion Lite safe?

Every recorded flaw

• Oct 1, 2026WP Fusion Lite: Does not require authentication on a settings handler that runs during admin initializationCVE-2026-90974 · fixed in 3.48.0 · reported by WPScanMedium 6.5
• Oct 1, 2026WP Fusion Lite: Does not perform a capability check on two of its admin AJAX handlersCVE-2026-90972 · fixed in 3.48.0 · reported by WPScanMedium 5.4
• Apr 24, 2024WP Fusion Lite: Insertion of Sensitive Information Into Sent DataCVE-2024-32796 · affects up to 3.42.10 · reported by PatchstackMedium 4.3
• Apr 3, 2024WP Fusion Lite: Improper Control of Generation of Code ('Code Injection')CVE-2024-27972 · affects up to 3.41.24 · reported by Patchstack1.6% oddsCritical 9.9
• Aug 9, 2021WP Fusion Lite: Cross-Site Request ForgeryCVE-2021-34661 · affects up to 3.37.18 · reported by WordfenceMedium 6.1
• Aug 9, 2021WP Fusion Lite: Reflected Cross-Site ScriptingCVE-2021-34660 · affects up to 3.37.18 · reported by WordfenceMedium 6.1

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.