Verygoodplugins vulnerabilities
We track 2 vulnerabilities in Verygoodplugins products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Verygoodplugins vulnerabilities
- 7.1 High severity
whatsapp-mcp: Improper Limitation of a Pathname to a Restricted Directory
WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the `whatsapp-bridge` HTTP API listens on `127.0.0.1:8080` without authentication and without Host header val
- 9.9 Critical severity
WP Fusion Lite: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through <= 3.41.24.