Medium · 4.3 CVE-2025-64228 EUVD-2025-36614GHSA-8gx7-cf2h-mfwc

WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability

Published Oct 29, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Fantastic Plugins Product: SUMO Affiliates Pro

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through <= 11.0.0.

Affected products

Vendor	Product	Affected	Fixed
FantasticPlugins	SUMO Affiliates Pro	≤ 11.0.0	—

References

https://patchstack.com/database/Wordpress/Plugin/affs/vulnerability/wordpress-sumo-affiliates-pro-plugin-11-0-0-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry