Affiliatewp

4 CVEs across 1 Affiliatewp products. Browse Affiliatewp vulnerabilities, severities, and proof-of-concept exploits.

Affiliatewp products with known CVEs

ProductCVEs
Affiliatewp4
Affiliatewp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65515High7.12026-08-06Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
CVE-2026-57809High7.12026-07-23Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.
CVE-2025-8877High7.52025-09-30The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in all versions up to, and including, 2.2…
CVE-2023-4600Medium4.32023-08-30The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' f…