PT-2025-43320 · Fantasticplugins+1 · Sumo Memberships For Woocommerce+1

0Xd4Rk5Id3 · Publicado 2025-10-22 · Atualizado 2025-10-22 · CVE-2025-60222

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FantasticPlugins SUMO Memberships for WooCommerce versions through 7.6.0

Description An incorrect privilege assignment exists in FantasticPlugins SUMO Memberships for WooCommerce, potentially allowing privilege escalation.

Recommendations Update FantasticPlugins SUMO Memberships for WooCommerce to a version newer than 7.6.0.

Correção

LPE

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2025-60222

Produtos afetados

Sumo Memberships For Woocommerce

Woocommerce

Referências · 5

• https://twitter.com/CVEnew/status/1981046860551995793 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability?_s_id=cve · Nota
• https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-60222 · Nota de Segurança
• https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability · Nota