Plugin icon

FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.)

fusewp

Vulnerabilities:

3

Last Updated:

August 26, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-07-28
Title
FuseWP < 1.1.25.2 - Cross-Site Request Forgery to Sync Rule Status Toggle
Fixed in
Fixed in 1.1.25.2
CVSS
4.3 (medium)
Published
2025-10-30
Title
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) < 1.1.23.1 - Missing Authorization to Authenticated (Subscriber+) Sync Rule Creation
Fixed in
Fixed in 1.1.23.1
CVSS
4.3 (medium)
Published
2025-10-24
Title
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) < 1.1.23.1 - Cross-Site Request Forgery to Sync Rule Creation
Fixed in
Fixed in 1.1.23.1
CVSS
4.3 (medium)