WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
affiliate-toolkit-starter
Published
2023-03-30
Title
affiliate-toolkit – WordPress Affiliate < 3.3.4 - Editor+ Stored XSS
Slug
affiliate-toolkit-starter
Published
2023-10-06
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.4.0 - Open Redirect via atkpout.php
Slug
affiliate-toolkit-starter
Published
2023-11-28
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.4.4 - Reflected Cross-Site Scripting via keyword
Slug
affiliate-toolkit-starter
Published
2023-12-11
Title
affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
Slug
affiliate-toolkit-starter
Published
2024-03-07
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.5.5 - Missing Authorization via atkp_import_product
Slug
affiliate-toolkit-starter
Published
2024-03-07
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.5.5 - Missing Authorization via atkp_create_list
Slug
affiliate-toolkit-starter
Published
2024-03-25
Title
affiliate-toolkit < 3.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via ratings
Slug
affiliate-toolkit-starter
Published
2024-06-20
Title
affiliate-toolkit < 3.4.5 - Unauthenticated Sensitive Information Exposure via Logs
Slug
affiliate-toolkit-starter
Published
2024-08-08
Title
affiliate-toolkit < 3.6 - Unauthenticated Full Path Dislcosure
Slug
affiliate-toolkit-starter
Published
2024-10-28
Title
affiliate-toolkit < 3.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode
Slug
affiliate-toolkit-starter
Published
2024-11-20
Title
affiliate-toolkit < 3.6.8 - Reflected Cross-Site Scripting
Slug
affiliate-toolkit-starter
Published
2025-01-23
Title
affiliate-toolkit – WP Affiliate Plugin with Amazon < 3.7.1 - Contributor+ Stored Cross-Site Scripting
Slug
affiliate-toolkit-starter
Published
2025-04-22
Title
affiliate-toolkit < 3.7.4 - Cross-Site Request Forgery
Slug
affiliate-toolkit-starter
Published
2026-05-26
Title
affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution
Slug
affiliate-toolkit-starter
Published
2026-08-13
Title
affiliate-toolkit < 3.8.9 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Slug
affiliate-toolkit-starter
Published
2026-10-07
Title
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display < 3.9.2 - Authenticated (Administrator+) SQL Injection
Slug
affiliate-toolkit-starter
Published
2026-10-12
Title
Affiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directive
Slug
affiliate-toolkit-starter
Published
2026-10-14
Title
affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby Parameter
Slug
affiliate-toolkit-starter
Published
2026-10-27
Title
affiliate-toolkit < 3.9.3 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parameter
Slug
affiliate-toolkit-starter
Published
2026-10-27
Title
affiliate-toolkit < 3.9.3 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter
Slug
affiliate-tools-viet-nam
Published
2025-01-16
Title
Affiliate Tools Việt Nam <= 0.3.17 - Reflected Cross-Site Scripting
Slug
affiliate-wp
Published
2025-09-29
Title
AffiliateWP < 2.29.0 - Unauthenticated SQL Injection
Slug
affiliate-wp
Published
2026-07-21
Title
AffiliateWP < 2.34.1 - Reflected Cross-Site Scripting
Slug
affiliate-wp
Published
2026-07-28
Title
AffiliateWP < 2.35.1 - Unauthenticated Stored Cross-Site Scripting
Slug
affiliatebooster-blocks
Published
2023-11-28
Title
Affiliate Booster < 3.0.6 - Blocks Enabling/Disabling via CSRF