Wpaffiliatemanager Affiliates Manager
9 CVEs affecting Wpaffiliatemanager Affiliates Manager. Latest disclosed: 2024-02-05. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-15868 | High | 8.8 | 2019-09-03 | The affiliates-manager plugin before 2.6.6 for WordPress has CSRF. |
CVE-2022-2798 | High | 8.0 | 2022-09-16 | The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to pe… |
CVE-2021-24844 | High | 7.2 | 2021-11-08 | The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leadin… |
CVE-2021-25078 | Medium | 6.1 | 2022-01-24 | The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, al… |
CVE-2023-28986 | Medium | 5.4 | 2023-07-10 | Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin <= 2.9.20 versions. |
CVE-2023-52148 | Medium | 5.3 | 2024-01-05 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager… |
CVE-2022-2799 | Medium | 4.8 | 2022-09-16 | The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cros… |
CVE-2024-0859 | Medium | 4.3 | 2024-02-05 | The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34. This is due to missing or… |
CVE-2023-52130 | Medium | 4.3 | 2024-01-05 | Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31. |