FantasticPlugins SUMO Affiliates Pro vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting FantasticPlugins SUMO Affiliates Pro: 3 record(s), with affected versions and fixes.

CVE-2026-32575 High · 7.1 CWE-79 Oct 6, 2026

WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.

CVE-2026-24989 Critical · 9.8 CWE-502 Mar 25, 2026

WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Object Injection.This issue affects SUMO Affiliates Pro: from n/a through < 11.4.0.

CVE-2025-64228 Medium · 4.3 CWE-497 Oct 29, 2025

WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through <= 11.0.0.