Medium 6.3
2024-10-16< 5.4.3
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
5.4.11
Update to 5.4.11 or later to address 7 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-5226
WordPress Fuse Social Floating Sidebar Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)
WordPress Fuse Social Floating Sidebar Plugin <= 5.4.6 is vulnerable to Cross Site Request Forgery (CSRF)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Fuse Social Floating Sidebar plugin <= 5.4.2 - Sensitive Information Disclosure vulnerability
WordPress Fuse Social Floating Sidebar plugin <= 5.4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability