Login Request a demo
AF
Product
Affiliate-toolkit
by Servit · last CVE Apr 22, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 1Medium 7Low 0
Severity
All severities9Critical1High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Affiliate-toolkit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5877
9.8
1%
Jan 1
The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint,…
Affected: before 3.4.3
CVE-2025-46231
8.8
0%
Apr 22
WordPress affiliate-toolkit plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
Affected: before 3.7.4
CVE-2024-1851
6.5
0%
Mar 8
The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_create_list() function…
Affected: before 3.5.5
CVE-2023-45105
6.1
0%
Dec 19
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit…
Affected: through 3.3.9
CVE-2023-46086
6.1
0%
Nov 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin…
Affected: through 3.4.3
CVE-2023-23786
5.4
0%
May 10
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Christof Servit affiliate-toolkit plugin <= 3.3.3 versions
Affected: through 3.3.3
CVE-2024-6562
5.3
1%
Aug 9
affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure
Affected: through 3.5.5
CVE-2024-37205
5.3
0%
Jul 10
WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability
Affected: before 3.4.4
CVE-2024-2298
4.3
0%
Mar 8
The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_import_product()…
Affected: before 3.5.5
Showing 9