AF
Product
AffiliateWP
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add AffiliateWP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8877 | 7.5 | Sep 30 | AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection Affected: through 2.28.2 |
| CVE-2026-65515 | 7.1 | Aug 6 | WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability Affected: through 2.35.0 |
| CVE-2026-57809 | 7.1 | Jul 23 | WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 2.34.0 |
Showing 3