SU
Vendor
supercleanse
5 products with CVEs on record
7
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-119089
New
TA
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
supercleanse
7.2
0%
Oct 31ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag
CVE-2026-5062
PA
PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links
supercleanse
4.9
0%
Aug 5PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter
CVE-2026-12426
MM
Members – Membership & User Role Editor Plugin
supercleanse
5.3
0%
Jul 11Members <= 3.2.22 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel
CVE-2026-1295
BN
Buy Now Plus — Payments with Stripe
supercleanse
6.4
0%
Jan 28Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2024-11008
MM
Members – Membership & User Role Editor Plugin
supercleanse
5.3
0%
Dec 11Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-2326
PA
PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin
supercleanse
4.3
0%
Mar 23Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2019-25147
PA
PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin
supercleanse
6.1
1%
Jun 7Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link