Plugin icon

Affiliate Program Suite — SliceWP Affiliates

slicewp

Vulnerabilities:

7

Last Updated:

May 26, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-06
Title
Affiliate Program Suite — SliceWP Affiliates < 1.2.7 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.2.7
CVSS
7.2 (high)
Published
2026-05-05
Title
Affiliate Program Suite < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode
Fixed in
Fixed in 1.2.8
CVSS
5.5 (medium)
Published
2024-12-17
Title
Affiliate Program Suite — SliceWP Affiliates < 1.1.24 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1.24
CVSS
6.1 (medium)
Published
2024-09-30
Title
SliceWP < 1.1.19 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1.19
CVSS
6.1 (medium)
Published
2024-09-12
Title
WordPress Affiliates Plugin — SliceWP Affiliates < 1.1.21 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1.21
CVSS
6.1 (medium)
Published
2024-05-06
Title
WordPress Affiliates Plugin — SliceWP Affiliates < 1.1.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.1.11
CVSS
4.4 (medium)
Published
2021-08-09
Title
SliceWP < 1.0.46 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.0.46
CVSS
7.1 (high)