FantasticPlugins vulnerabilities
10 published CVEs name FantasticPlugins among the affected products.
- 10Published CVEs10 of them scored
- 3Last 12 monthspublished in the last year
- 2Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-7534
SUMO Reward Points for WooCommerce <= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter
FantasticPlugins · SUMO Reward Points for WooCommerce
High7.2 - CVE-2026-24989
WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability
FantasticPlugins · SUMO Affiliates Pro
Critical9.8 - CVE-2025-64222
WordPress WooCommerce Recover Abandoned Cart plugin <= 24.6.0 - Arbitrary Content Deletion vulnerability
FantasticPlugins · WooCommerce Recover Abandoned Cart
High7.5 - CVE-2025-64228
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability
FantasticPlugins · SUMO Affiliates Pro
Medium4.3 - CVE-2025-62005
WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Cross Site Request Forgery (CSRF) vulnerability
FantasticPlugins · SUMO Memberships for WooCommerce
High7.1 - CVE-2025-60222
WordPress SUMO Memberships for WooCommerce plugin <= 7.8.0 - Privilege Escalation vulnerability
FantasticPlugins · SUMO Memberships for WooCommerce
High8.8 - CVE-2025-52757
WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Arbitrary Content Deletion vulnerability
FantasticPlugins · SUMO Memberships for WooCommerce
Medium6.5 - CVE-2025-32291
WordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerability
FantasticPlugins · SUMO Affiliates Pro
Critical10.0 - CVE-2025-32925
WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability
FantasticPlugins · SUMO Reward Points
High8.3 - CVE-2025-0956
WooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object Injection
FantasticPlugins · WooCommerce Recover Abandoned Cart
High8.1