WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
affiliateimportereb
Published
2024-11-21
Title
AffiliateImporterEb <= 1.0.6 - Reflected XSS
Slug
affiliateimportereb
Published
2024-11-21
Title
AffiliateImporterEb <= 1.0.6 - Reflected XSS via Search
Slug
affiliates
Published
2026-10-12
Title
Affiliates < 7.1.0 - Unauthenticated PHP Object Injection
Slug
affiliates-manager
Published
2019-05-26
Title
Affiliates Manager < 2.6.6 - CRSF Issues
Slug
affiliates-manager
Published
2020-09-14
Title
Affiliate Manager < 2.7.8 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
affiliates-manager
Published
2021-10-11
Title
Affiliate Manager < 2.8.7 - Admin+ SQL injection
Slug
affiliates-manager
Published
2021-12-24
Title
Affiliates Manager < 2.9.0 - Unauthenticated Stored Cross-Site Scripting
Slug
affiliates-manager
Published
2022-08-16
Title
Affiliates Manager < 2.9.14 - Reflected Cross-Site Scripting
Slug
affiliates-manager
Published
2022-08-16
Title
Affiliates Manager < 2.9.14 - Arbitrary Affiliates & Creatives Deletion via CSRF
Slug
affiliates-manager
Published
2022-08-16
Title
Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site Scripting
Slug
affiliates-manager
Published
2022-08-16
Title
Affiliates Manager < 2.9.14 - Affiliate CSV Injection
Slug
affiliates-manager
Published
2023-03-29
Title
Affiliates Manager < 2.9.21 - Cross-Site Request Forgery
Slug
affiliates-manager
Published
2023-12-28
Title
Affiliates Manager < 2.9.32 - Cross-Site Request Forgery via multiple AJAX actions
Slug
affiliates-manager
Published
2023-12-28
Title
Affiliates Manager < 2.9.31 - Sensitive Information Exposure via Log File
Slug
affiliates-manager
Published
2024-01-30
Title
Affiliates Manager < 2.9.35 - Cross-Site Request Forgery
Slug
affiliates-manager
Published
2026-06-08
Title
Affiliates Manager < 2.9.51 - Unauthenticated Information Exposure
Slug
affiliates-manager
Published
2026-06-26
Title
Affiliates Manager < 2.9.50 - Missing Authorization
Slug
affiliates-manager
Published
2026-08-18
Title
Affiliates Manager < 2.9.54 - Unauthenticated SQL Injection
Slug
affiliates-manager
Published
2026-08-18
Title
Affiliates Manager < 2.9.54 - Unauthenticated Stored Cross-Site Scripting
Slug
affiliates-manager-google-recaptcha-integration
Published
2025-05-19
Title
Affiliates Manager Google reCAPTCHA Integration < 1.0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
affiliatewp-external-referral-links
Published
2025-09-22
Title
AffiliateWP – External Referral Links < 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
affiliatex
Published
2024-10-21
Title
AffiliateX < 1.2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
affiliatex
Published
2026-01-06
Title
AffiliateX < 1.4.0 - Missing Authorization
Slug
affiliatex
Published
2026-01-15
Title
AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings
Slug
affiliatex
Published
2026-07-24
Title
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking < 2.3.6 - Unauthenticated Server-Side Request Forgery