PT-2025-43320 · Fantasticplugins+1 · Sumo Memberships For Woocommerce+1

0Xd4Rk5Id3 · Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-60222

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FantasticPlugins SUMO Memberships for WooCommerce versions through 7.6.0

Description An incorrect privilege assignment exists in FantasticPlugins SUMO Memberships for WooCommerce, potentially allowing privilege escalation.

Recommendations Update FantasticPlugins SUMO Memberships for WooCommerce to a version newer than 7.6.0.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-60222

Affected Products

Sumo Memberships For Woocommerce

Woocommerce

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-60222 · Security Note
• https://twitter.com/CVEnew/status/1981046860551995793 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability · Note