TI-2025-23946 CVE-2025-32925 · GHSA-33v4-3fqc-hxh5WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerabilityPriority MEDIUM 43Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in FantasticPlugins SUMO Reward Points rewardsystem allows PHP Local File Inclusion.This issue affects…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00489 · Published 2025-05-19 · No fix listed CWE-98