Sensitive Data Exposure in FantasticPlugins SUMO Affiliates Pro
CVE-2025-64228

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Sumo Affiliates Pro
Vendor
CVE Published:
29 October 2025

What is CVE-2025-64228?

The SUMO Affiliates Pro plugin from FantasticPlugins is affected by a vulnerability that allows unauthorized users to retrieve embedded sensitive data. This flaw may expose crucial system information, posing significant risks to the integrity and confidentiality of the data within the affected versions (<= 11.0.0). Users are advised to take immediate action to mitigate the risks associated with this vulnerability.

Affected Version(s)

SUMO Affiliates Pro <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/affs...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson | Patchstack Bug Bounty Program
JSON
.