Vendor
The WP Fusion (Pro) plugin is vulnerable to unauthorized administrator account creation due to insufficient authorization checks in the ThriveCart Auto Login handler, allowing authenticated users to escalate privileges.