Vulnerabilities in FantasticPlugins
9 resultsCVE-2025-0956HIGHWooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object InjectionEPSS 0.5%CVE-2025-32291CRITICALWordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-32925HIGHWordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-24989CRITICALWordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-60222HIGHWordPress SUMO Memberships for WooCommerce plugin <= 7.8.0 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2025-52757MEDIUMWordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Arbitrary Content Deletion vulnerabilityEPSS 0.2%CVE-2025-64222HIGHWordPress WooCommerce Recover Abandoned Cart plugin <= 24.6.0 - Arbitrary Content Deletion vulnerabilityEPSS 0.2%CVE-2025-64228MEDIUMWordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-62005HIGHWordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%