Fusion News versions 3.6.1 and below suffer from a flaw that allows for unauthorized account additions.