CVE-2025-32925CWE-98

WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability

High · published May 19, 2025

CVSS v3.1
8.3
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in FantasticPlugins SUMO Reward Points rewardsystem allows PHP Local File Inclusion.This issue affects SUMO Reward Points: from n/a through <= 30.7.0.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.2th percentile
Weakness
CWE-98 · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Published
2025-05-19T19:56Z
EPSS history
Timeline
  • 19 MAY 19:56Z
    WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability
    cvelistv5