VendorsWpaffiliatemanageraffiliates_managerany version
Vulnerabilities

Wpaffiliatemanager Affiliates Manager any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2019-15868
The affiliates-manager plugin before 2.6.6 for WordPress has CSRF.
Published 2019-09-03 · Modified
8.8EPSS 0.007
CVE-2023-28986
WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-07-10 · Modified
8.8EPSS 0.003
CVE-2023-52130
WordPress Affiliates Manager Plugin <= 2.9.31 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2024-01-05 · Modified
8.8EPSS 0.002
CVE-2022-2798
Affiliates Manager < 2.9.14 - Affiliate CSV Injection
Published 2022-09-16 · Modified
8.0EPSS 0.012
CVE-2021-24844
Affiliate Manager < 2.8.7 - Admin+ SQL injection
Published 2021-11-08 · Modified
7.2EPSS 0.015
CVE-2021-25078
Affiliates Manager < 2.9.0 - Unauthenticated Stored Cross-Site Scripting
Published 2022-01-24 · Modified
6.1EPSS 0.023
CVE-2023-52148
WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure
Published 2024-01-05 · Modified
5.3EPSS 0.004
CVE-2022-2799
Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site Scripting
Published 2022-09-16 · Modified
4.8EPSS 0.007
CVE-2024-0859
Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery
Published 2024-02-05 · Modified
4.3EPSS 0.003