Advisories · Technology

FantasticPlugins SUMO Affiliates Pro.

Every CVE that names FantasticPlugins SUMO Affiliates Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-24989 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability
- FantasticPlugins SUMO Affiliates Pro
- Insecure deserialization
Not analysed yet 25 Mar 2026
CVE-2025-64228 CVE record

CVSS 4.3 Medium

WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability
- FantasticPlugins SUMO Affiliates Pro
- Information disclosure
Not analysed yet 29 Oct 2025
CVE-2025-32291 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerability
- FantasticPlugins SUMO Affiliates Pro
- Unrestricted file upload
Not analysed yet 9 Jun 2025