Plugin icon

affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

affiliate-toolkit-starter

Vulnerabilities:

14

Last Updated:

May 27, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-05-26
Title
affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution
Fixed in
No known fix
CVSS
7.2 (high)
Published
2025-04-22
Title
affiliate-toolkit < 3.7.4 - Cross-Site Request Forgery
Fixed in
Fixed in 3.7.4
CVSS
4.3 (medium)
Published
2025-01-23
Title
affiliate-toolkit – WP Affiliate Plugin with Amazon < 3.7.1 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.7.1
CVSS
6.4 (medium)
Published
2024-11-20
Title
affiliate-toolkit < 3.6.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.6.8
CVSS
6.1 (medium)
Published
2024-10-28
Title
affiliate-toolkit < 3.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode
Fixed in
Fixed in 3.6.6
CVSS
6.4 (medium)
Published
2024-08-08
Title
affiliate-toolkit < 3.6 - Unauthenticated Full Path Dislcosure
Fixed in
Fixed in 3.6
CVSS
5.3 (medium)
Published
2024-06-20
Title
affiliate-toolkit < 3.4.5 - Unauthenticated Sensitive Information Exposure via Logs
Fixed in
Fixed in 3.4.5
CVSS
5.3 (medium)
Published
2024-03-25
Title
affiliate-toolkit < 3.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via ratings
Fixed in
Fixed in 3.4.6
CVSS
6.4 (medium)
Published
2024-03-07
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.5.5 - Missing Authorization via atkp_create_list
Fixed in
Fixed in 3.5.5
CVSS
6.3 (medium)
Published
2024-03-07
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.5.5 - Missing Authorization via atkp_import_product
Fixed in
Fixed in 3.5.5
CVSS
4.3 (medium)
Published
2023-12-11
Title
affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
Fixed in
Fixed in 3.4.3
CVSS
7.2 (high)
Published
2023-11-28
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.4.4 - Reflected Cross-Site Scripting via keyword
Fixed in
Fixed in 3.4.4
CVSS
6.1 (medium)
Published
2023-10-06
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.4.0 - Open Redirect via atkpout.php
Fixed in
Fixed in 3.4.0
CVSS
3.4 (low)
Published
2023-03-30
Title
affiliate-toolkit – WordPress Affiliate < 3.3.4 - Editor+ Stored XSS
Fixed in
Fixed in 3.3.4
CVSS
3.5 (low)