BaseFortify

Publication date: 2025-10-22

Last updated on: 2026-04-01

Assigner: Patchstack

Description

Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.8.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-22

Last Modified

2026-04-01

Generated

2026-07-06

AI Q&A

2025-10-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60222

Affected Vendors & Products

Vendor	Product	Version / Range
fantasticplugins	sumo_memberships_for_woocommerce	7.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-266	A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an Incorrect Privilege Assignment issue in the SUMO Memberships plugin for WooCommerce by FantasticPlugins. It allows privilege escalation, meaning that users may gain higher access rights than intended, potentially compromising the security of the system.

Impact Analysis

The vulnerability can allow unauthorized users to escalate their privileges, potentially gaining access to restricted areas or functions within the WooCommerce membership system. This can lead to unauthorized actions, data exposure, or manipulation of membership settings.

Hi! I’m here to help you understand CVE-2025-60222. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70