VendorsSERVITaffiliate-toolkitall versions
Vulnerabilities

SERVIT affiliate-toolkit

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2023-5877
affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
Published 2024-01-01 · Modified
9.8EPSS 0.009
CVE-2025-46231
WordPress affiliate-toolkit plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
Published 2025-04-22 · Modified
8.8EPSS 0.002
CVE-2023-46086
WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)
Published 2023-11-30 · Modified
7.1EPSS 0.004
CVE-2024-1851
affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list
Published 2024-03-08 · Modified
6.5EPSS 0.003
CVE-2023-45105
WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open Redirection
Published 2023-12-19 · Modified
6.1EPSS 0.004
CVE-2023-23786
WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)
Published 2023-05-10 · Modified
5.9EPSS 0.004
CVE-2024-2298
affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product
Published 2024-03-08 · Modified
4.3EPSS 0.003