CVE-2025-62005 is a CSRF vulnerability affecting FantasticPlugins SUMO Memberships for WooCommerce versions before 7.8.0. The vulnerability allows an attacker to trick an authenticated user into submitting unwanted requests, potentially leading to unauthorized changes or actions within the membership plugin. The CVSS 3.1 base score is 7.1, with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability rated as low to low to low respectively.

Successful exploitation could allow an attacker to perform unauthorized actions with the privileges of an authenticated user, potentially leading to limited confidentiality, integrity, and availability impacts within the affected plugin. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted links and consider disabling or restricting the plugin if possible to reduce exposure.