Plugin icon

AffiliateX – Amazon Affiliate Plugin

affiliatex

Vulnerabilities:

3

Last Updated:

April 3, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-01-15
Title
AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings
Fixed in
Fixed in 1.4.0
CVSS
6.4 (medium)
Published
2026-01-06
Title
AffiliateX < 1.4.0 - Missing Authorization
Fixed in
Fixed in 1.4.0
CVSS
4.3 (medium)
Published
2024-10-21
Title
AffiliateX < 1.2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.2.9.1
CVSS
6.4 (medium)