plugin
6 known security issues reported for the Sumomemberships WordPress plugin. Most recent disclosed Oct 22, 2025.
Running Sumomemberships on your site? Check whether your installed version is affected.
Scan your site free[en] Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Cross Site Request Forgery.This issue affects SUMO Memberships for WooCommerce: from n/a through < 7.8.0.
[en] Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.6.0.
[en] Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.6.0.
The SUMO Memberships for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to 7.8.0 (exclusive). This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick...
The SUMO Memberships for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to 7.8.0 (exclusive). This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary content.
The SUMO Memberships for WooCommerce plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 7.8.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to gain access to administrative-level user access.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free