Codexpert Wc Affiliate
3 CVEs affecting Codexpert Wc Affiliate. Latest disclosed: 2025-03-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12321 | High | 7.1 | 2025-01-27 | The WC Affiliate WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-S… |
CVE-2024-12336 | Medium | 6.5 | 2025-03-15 | The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check… |
CVE-2024-12334 | Medium | 6.1 | 2025-01-26 | The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versio… |