Affiliatewp

4 CVEs in 1 Affiliatewp product, including Affiliatewp. Newest: CVE-2026-65515 (2026-08-06). Severity, EPSS and public exploits for each.

Affiliatewp products with known CVEs

ProductCVEs
Affiliatewp4
Affiliatewp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65515High7.12026-08-06Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
CVE-2026-57809High7.12026-07-23Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.
CVE-2025-8877High7.52025-09-30The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in all versions up to, and including, 2.2…
CVE-2023-4600Medium4.32023-08-30The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' f…