Fantasticplugins

10 CVEs across 6 Fantasticplugins products. Browse Fantasticplugins vulnerabilities, severities, and proof-of-concept exploits.

Fantasticplugins products with known CVEs

ProductCVEs
Sumo Affiliates Pro3
Sumo Memberships For Woocommerce3
Woocommerce Recover Abandoned Cart2
Sumo Reward Points1
Sumo Reward Points1
Sumo Reward Points For Woocommerce1
Fantasticplugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-7534High7.22026-07-23The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REST API endpoint `/wp-json/wc-srp/v1/earning`…
CVE-2026-24989Critical9.82026-03-25Deserialization of Untrusted Data vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Object Injection.This issue affects SUMO Affiliates Pro: fr…
CVE-2025-64222High7.52025-12-18Missing Authorization vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart rac allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-64228Medium4.32025-10-29Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded…
CVE-2025-62005High7.12025-10-22Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Cross Site Request Forgery.This iss…
CVE-2025-60222High8.82025-10-22Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affect…
CVE-2025-52757Medium6.52025-10-22Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Exploiting Incorrectly Configured Access Contro…
CVE-2025-32291Critical10.02025-06-09Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO…
CVE-2025-32925High8.32025-05-19Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in FantasticPlugins SUMO Reward Points re…
CVE-2025-0956High8.12025-03-05The WooCommerce Recover Abandoned Cart plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 24.4.0 via deserializat…