WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
af-tell-a-friend
Published
2025-04-09
Title
AF Tell a Friend <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
affi-affiliate-marketing-for-woo
Published
2026-10-01
Title
AFFI – Affiliate Marketing for WooCommerce < 1.0.10 - Missing Authorization
Slug
affi-affiliate-marketing-for-woo
Published
2026-10-08
Title
AFFI – Affiliate Marketing for WooCommerce < 1.0.11 - Unauthenticated PHP Object Injection
Slug
affieasy
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
affieasy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
affieasy
Published
2024-04-12
Title
AffiEasy < 1.1.6 - Cross-Site Request Forgery
Slug
affieasy
Published
2024-05-29
Title
AffiEasy < 1.1.7 - Cross-Site Request Forgery to Various Actions
Slug
affiliaa-affiliate-program-with-mlm
Published
2026-07-10
Title
Affilia < 3.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modification
Slug
affiliate-ads-builder-for-clickbank-products
Published
2017-11-14
Title
Affiliate Ads for Clickbank Products <= 1.6 - Stored Cross-Site Scripting (XSS)
Slug
affiliate-advantage
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
affiliate-ai-lite
Published
2025-11-20
Title
Affiliate AI Lite < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
affiliate-coupons
Published
2025-02-23
Title
Affiliate Coupons < 1.7.4 - Authenticated (Contributor+) Local File Inclusion
Slug
affiliate-disclosure-statement
Published
2025-01-07
Title
Affiliate Disclosure Statement <= 0.3 - Cross-Site Request Forgery
Slug
affiliate-for-woocommerce
Published
2022-08-01
Title
Affiliate For WooCommerce < 4.8.0 - Subscriber+ Unauthorised Actions
Slug
affiliate-for-woocommerce
Published
2022-08-02
Title
Affiliate For WooCommerce < 4.8.0 - Subscriber+ Paypal Email Update via IDOR
Slug
affiliate-link-tracker
Published
2025-04-10
Title
Affiliate Link Tracker <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
affiliate-links
Published
2023-04-14
Title
Affiliate Links Lite < 2.7 - Contributor+ Stored XSS
Slug
affiliate-links
Published
2025-02-17
Title
Affiliate Links: WordPress Plugin for Link Cloaking and Link Management < 3.1.0 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection
Slug
affiliate-links
Published
2025-04-10
Title
Affiliate Links Lite < 3.2.0 - Reflected Cross-Site Scripting
Slug
affiliate-links-manager
Published
2025-02-21
Title
Affiliate Links Manager <= 1.0 - Reflected Cross-Site Scripting
Slug
affiliate-plus
Published
2025-07-23
Title
Affiliate Plus <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
affiliate-power
Published
2021-09-13
Title
Affiliate Power < 2.3.0 - Reflected Cross-Site Scripting
Slug
affiliate-pro
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
affiliate-reviews
Published
2025-07-15
Title
Affiliate Reviews < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via numColumns Parameter
Slug
affiliate-solution
Published
2023-08-14
Title
AFFILIATE Solution <= 1.0 - Admin+ Stored XSS