CVE-2026-90972 | WP Fusion Lite Plugin up to 3.47.x on WordPress Admin AJAX access control (EUVD-2026-90515)

October 1, 2026 Yanac

A vulnerability classified as critical has been found in WP Fusion Lite Plugin up to 3.47.x on WordPress. This impacts an unknown function of the component Admin AJAX Handler. Performing a manipulation results in improper access controls.

This vulnerability is cataloged as CVE-2026-90972. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More