Login Request a demo
AF
Product
AffiliateWP
by AffiliateWP · last CVE Aug 6, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add AffiliateWP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-8877
7.5
0%
Sep 30
AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection
Affected: through 2.28.2
CVE-2026-65515
7.1
0%
Aug 6
WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.35.0
CVE-2026-57809
7.1
0%
Jul 23
WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 2.34.0
CVE-2024-5286
4.8
0%
Jul 13
WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing
Affected: before 6.5.1
CVE-2023-4600
4.3
0%
Aug 30
The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via…
Affected: 2.14.0
Showing 5