Login Request a demo
AM
Product
Affiliates Manager
by Wpaffiliatemanager · last CVE Feb 5, 2024
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 5Medium 4Low 0
Severity
All severities9Critical0High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Affiliates Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-52130
8.8
0%
Jan 5
Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31
Affected: through 2.9.31
CVE-2023-28986
8.8
0%
Jul 10
Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin <= 2.9.20 versions
Affected: before 2.9.21
CVE-2019-15868
8.8
1%
Sep 3
The affiliates-manager plugin before 2.6.6 for WordPress has CSRF
Affected: before 2.6.6
CVE-2022-2798
8.0
1%
Sep 16
The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection…
Affected: before 2.9.14
CVE-2021-24844
7.2
2%
Nov 8
The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL…
Affected: before 2.8.7
CVE-2021-25078
6.1
2%
Jan 24
The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing…
Affected: before 2.9.0
CVE-2023-52148
5.3
0%
Jan 5
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through…
Affected: through 2.9.30
CVE-2022-2799
4.8
1%
Sep 16
The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting…
Affected: before 2.9.14
CVE-2024-0859
4.3
0%
Feb 5
The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34
Affected: through 2.9.34
Showing 9