Plugin icon

WP Affiliate Disclosure

wp-affiliate-disclosure

Vulnerabilities:

4

Last Updated:

May 3, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2023-12-29
Title
WP Affiliate Disclosure < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via $id
Fixed in
Fixed in 1.2.8
CVSS
6.4 (medium)
Published
2023-11-03
Title
WP Affiliate Disclosure < 1.2.7 - Cross-Site Request Forgery via check_capability
Fixed in
Fixed in 1.2.7
CVSS
4.3 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.2.3
CVSS
4.3 (medium)
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Fixed in
Fixed in 1.1.4
CVSS
9.9 (critical)