Vulnerabilidades en FantasticPlugins
10 resultadosAnálisis Vexday
FantasticPlugins apresenta 10 vulnerabilidades catalogadas, sendo 2 críticas, porém nenhuma sob ataque ativo documentado atualmente. A fraqueza dominante é desserialização insegura (CWE-502), com apenas 1 CVE publicada nos últimos 90 dias, indicando risco estável e sem pressão de exploração imediata.
CVE-2025-0956HIGHWooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object InjectionEPSS 0.6%CVE-2025-32291CRITICALWordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-32925HIGHWordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-24989CRITICALWordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-60222HIGHWordPress SUMO Memberships for WooCommerce plugin <= 7.8.0 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2025-64222HIGHWordPress WooCommerce Recover Abandoned Cart plugin <= 24.6.0 - Arbitrary Content Deletion vulnerabilityEPSS 0.3%CVE-2025-52757MEDIUMWordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Arbitrary Content Deletion vulnerabilityEPSS 0.3%CVE-2025-64228MEDIUMWordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-7534HIGHSUMO Reward Points for WooCommerce <= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' ParameterEPSS 0.2%CVE-2025-62005HIGHWordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%