FantasticPlugins

Products

Product	CVEs	Exploited	Latest
SUMO Affiliates Pro	3	–	Mar 25, 2026
SUMO Memberships for WooCommerce	3	–	Oct 22, 2025
WooCommerce Recover Abandoned Cart	2	–	Dec 18, 2025
SUMO Reward Points	1	–	May 19, 2025
SUMO Reward Points for WooCommerce	1	–	Jul 23, 2026

CVE-2026-7534 High 7.2 SUMO Reward Points for WooCommerce <= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter 0.3%
CVE-2026-24989 Critical 9.8 WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability 0.4%
CVE-2025-64222 High 7.5 WordPress WooCommerce Recover Abandoned Cart plugin <= 24.6.0 - Arbitrary Content Deletion vulnerability 0.3%
CVE-2025-64228 Medium 4.3 WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability 0.2%
CVE-2025-62005 High 7.1 WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
CVE-2025-60222 High 8.8 WordPress SUMO Memberships for WooCommerce plugin <= 7.8.0 - Privilege Escalation vulnerability 0.4%
CVE-2025-52757 Medium 6.5 WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Arbitrary Content Deletion vulnerability 0.3%
CVE-2025-32291 Critical 10.0 WordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerability 0.5%
CVE-2025-32925 High 8.3 WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability 0.5%
CVE-2025-0956 High 8.1 WooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object Injection 0.6%