CVE-2024-27972

Severity

CRITICAL

CVSS

9.9

EPSS

0.01626

Risk score

40.17

CISA KEV

PoC

Published

2024-04-03

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-25146, GHSA-WVFW-6RV6-RMWC

Products

Very Good Plugins:WP Fusion Lite 0 ≤3.41.24

Sources

euvd EUVD-2024-25146

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through <= 3.41.24.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25146
https://patchstack.com/database/Wordpress/Plugin/wp-fusion-lite/vulnerability/wordpress-wp-fusion-lite-plugin-3-41-24-remote-code-execution-rce-vulnerability?_s_id=cve