WP
Vendor
Wpaffiliatemanager
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-0859 | AM Affiliates Manager Wpaffiliatemanager | 4.3 | Feb 5 | The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34 |
| CVE-2023-52148 | AM Affiliates Manager Wpaffiliatemanager | 5.3 | Jan 5 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through… |
| CVE-2023-52130 | AM Affiliates Manager Wpaffiliatemanager | 8.8 | Jan 5 | Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31 |
| CVE-2023-28986 | AM Affiliates Manager Wpaffiliatemanager | 8.8 | Jul 10 | Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin <= 2.9.20 versions |
| CVE-2022-2799 | AM Affiliates Manager Wpaffiliatemanager | 4.8 | Sep 16 | The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting… |
| CVE-2022-2798 | AM Affiliates Manager Wpaffiliatemanager | 8.0 | Sep 16 | The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection… |
| CVE-2021-25078 | AM Affiliates Manager Wpaffiliatemanager | 6.1 | Jan 24 | The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing… |
| CVE-2021-24844 | AM Affiliates Manager Wpaffiliatemanager | 7.2 | Nov 8 | The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL… |
| CVE-2019-15868 | AM Affiliates Manager Wpaffiliatemanager | 8.8 | Sep 3 | The affiliates-manager plugin before 2.6.6 for WordPress has CSRF |