AF
Vendor
AffiliateWP
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65515 | AF AffiliateWP AffiliateWP | 7.1 | Aug 6 | WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57809 | AF AffiliateWP AffiliateWP | 7.1 | Jul 23 | WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-8877 | AF AffiliateWP AffiliateWP | 7.5 | Sep 30 | AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection |
| CVE-2024-5286 | AF Affiliatewp Affiliatewp | 4.8 | Jul 13 | WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing |
| CVE-2023-4600 | AF AffiliateWP AffiliateWP | 4.3 | Aug 30 | The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via… |
