Affiliate Program Suite — SliceWP Affiliates vulnerabilities

Product

Affiliate Program Suite — SliceWP Affiliates

by iovamihai · last CVE May 6, 2026

CVEs

On KEV

6.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Affiliate Program Suite — SliceWP Affiliates to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-6672	6.4	0%	May 6	Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode Affected: through 1.2.7
CVE-2024-12454	6.1	0%	Dec 18	Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting Affected: through 1.1.23
CVE-2024-8714	6.1	0%	Sep 13	WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting Affected: through 1.1.20