fullworks — Vulnerabilities & Security Advisories 16

Fullworks develops WordPress management and automation tools for small businesses, with 16 CVEs recorded primarily involving stored cross-site scripting (XSS) and remote code execution (RCE) vulnerabilities in its plugin integrations. Historically, common weaknesses include insufficient input validation and improper access controls leading to privilege escalation. Notable security characteristics include frequent updates addressing authentication bypass flaws, though no major public incidents have been documented. The company's plugins often interact with multiple WordPress components, creating complex attack surfaces where SQL injection and file inclusion vulnerabilities have periodically emerged, requiring prompt patching by users.