AF
Vendor
AffiliateWP
1 product with CVEs on record
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-65515
AF
AffiliateWP
AffiliateWP
7.1
0%
Aug 6WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57809
AF
AffiliateWP
AffiliateWP
7.1
0%
Jul 23WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-8877
AF
AffiliateWP
AffiliateWP
7.5
0%
Sep 30AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection
CVE-2024-5286
AF
Affiliatewp
Affiliatewp
4.8
0%
Jul 13WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing
CVE-2023-4600
AF
AffiliateWP
AffiliateWP
4.3
0%
Aug 30The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via…