Access Control Vulnerability in FantasticPlugins SUMO Memberships for WooCommerce
CVE-2025-52757

6.3MEDIUM

Key Information:

Vendor

WordPress
Status
Sumo Memberships For WooCommerce
Vendor
CVE Published:
22 October 2025

What is CVE-2025-52757?

A vulnerability exists in the SUMO Memberships for WooCommerce plugin that permits unauthorized access due to improperly configured security levels. This flaw allows attackers to exploit deficiencies in access control, potentially permitting malicious activities such as unauthorized content deletion or manipulation. It affects all versions up to 7.6.0, making it essential for users to take immediate action to secure their installations.

Affected Version(s)

SUMO Memberships for WooCommerce <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/sumo...
vdb-entry

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 (Patchstack Alliance)
JSON
.