SUMO Reward Points for WooCommerce vulnerabilities
1 known vulnerability in SUMO Reward Points for WooCommerce from FantasticPlugins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
SUMO Reward Points for WooCommerce: Improper Neutralization of Input During Web Page Generation
The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REST API endpoint `/wp-json/wc-srp/v1/earning` in versions up to, and including, 32.7.0. This is due to the `user_has_cap` filter in the `SRP_REST_