nfusionsolutions vulnerabilities

Products

• Precious Metals Automated Product Pricing – Pro 1
• precious metals charts and widgets 1
• Precious Metals Charts and Widgets for WordPress 1

Latest nfusionsolutions CVEs

Newest publication first

1. CVE-2026-39704 WordPress Precious Metals Automated Product Pricing – Pro plugin <= 4.0.5 - Broken Access Control vulnerability

   Published 2026-04-08

   Medium·CVSS 5.3 EPSS 0.16%

   Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Precious Metals Automated Product Prici...

2. CVE-2024-13572 Precious Metals Charts and Widgets for WordPress <= 1.2.8 - Authenticated (Contributor+) Stored Cross-site Scripting

   Published 2025-01-24

   Medium·CVSS 5.4 EPSS 0.23%

   The Precious Metals Charts and Widgets for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nfusion-widget' shortcode in all versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping on user suppli...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.