The vulnerability identified as CVE-2024-27972 affects WP Fusion Lite versions up to 3.41.24. It is classified as an improper control of generation of code, commonly known as code injection. This flaw allows an attacker with low privileges to execute arbitrary code without requiring user interaction, impacting the system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.9, reflecting the critical nature of this vulnerability. No patch or vendor advisory details are currently available to confirm remediation status.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized code execution, data disclosure, and potential denial of service. The critical CVSS score (9.9) reflects the high impact on confidentiality, integrity, and availability. There are no confirmed reports of exploitation in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting use of the affected WP Fusion Lite plugin versions to reduce exposure. Monitor official Jack Arturo communications for updates on patches or mitigations.