Skip to content
OpenAdvisories

Vendor

Very Good Plugins

5 known vulnerabilities.

Products

WP Fusion Lite 2 WP Fusion (Pro) 1 whatsapp-mcp 1 Fatal Error Notify 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-14444

    WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter

    The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart() function. …

    Very Good Plugins WP Fusion (Pro) Web / CMS
  • High 7.7
    CVE-2026-46555

    WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltration

    WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the `whatsapp-bridge` HTTP API listens on `127.0.0.1:8080` without authentication and without Host header va…

    Very Good Plugins whatsapp-mcp