CVE-2024-27972
Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through <= 3.41.24.
Affects 1 product across 3 vendors.
Attacker injects arbitrary code that is executed by the application process.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A critical code injection vulnerability exists in Jack Arturo WP Fusion Lite versions up to 3.41.24, allowing attackers to execute arbitrary code on the server.
BSID: BS-2024-GLOBAL-206130-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2024-27972?
What is the CVSS score for CVE-2024-27972?
Is CVE-2024-27972 actively exploited?
How do I remediate CVE-2024-27972?
What systems are affected by CVE-2024-27972?
| CVE ID | CVE-2024-27972 |
|---|---|
| BSID | BS-2024-GLOBAL-206130-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| Published | 2024-04-03 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through <= 3.41.24.
Source: NIST NVD / MITRE CVE Database
An attacker can exploit this vulnerability by injecting malicious code through specific input fields in the WP Fusion Lite plugin, leading to remote code execution.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Fusion | — | — |
| Lite | — | — |
| Verygoodplugins | Wp Fusion | ≤ 3.41.24 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 17e9472ede37cfe8fc0d20cd2f6c136737421725318fdecae6eb2ab8dc207f4ca6d21f914d3e38e58fce3b90a061b286472d5f5701da97665aceb0998061eaa0 |
Critical Severity - Know Your Exposure
A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →