EUVD-2024-49366

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

WordPress Affiliates Plugin is vulnerable to Reflected Cross-Site Scripting, affecting versions up to 1.1.20.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8714	13 Sep 202417:57	–	circl
CNNVD	WordPress plugin SliceWP Affiliates 跨站脚本漏洞	13 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8714	13 Sep 202415:10	–	cve
Cvelist	CVE-2024-8714 WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting	13 Sep 202415:10	–	cvelist
NVD	CVE-2024-8714	13 Sep 202415:15	–	nvd
Patchstack	WordPress SliceWP Plugin <= 1.1.20 is vulnerable to Cross Site Scripting (XSS)	16 Sep 202400:00	–	patchstack
Patchstack	WordPress WordPress Affiliates Plugin — SliceWP Affiliates plugin <= 1.1.20 - Reflected Cross-Site Scripting vulnerability	16 Sep 202407:30	–	patchstack
Positive Technologies	PT-2024-39194 · WordPress · Slicewp Affiliates	13 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8714	23 May 202507:17	–	redhatcve
Vulnrichment	CVE-2024-8714 WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting	13 Sep 202415:10	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "49b1d778-c7f6-38ec-be5a-4c16330482e3",
        "vendor": {
          "name": "iovamihai"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "be1656dc-fa38-323a-bb9a-99d883c25507",
        "product": {
          "name": "WordPress Affiliates Plugin — SliceWP Affiliates"
        },
        "product_version": "* ≤1.1.20"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/45dd22d4-9a51-4569-a756-1f1a5f8626c1
plugins	www.plugins.trac.wordpress.org/changeset/3151062/
plugins	www.plugins.trac.wordpress.org/browser/slicewp/tags/1.1.20/includes/admin/commissions/class-list-table-commissions.php
plugins	www.plugins.trac.wordpress.org/browser/slicewp/tags/1.1.20/includes/admin/visits/class-list-table-visits.php
plugins	www.plugins.trac.wordpress.org/browser/slicewp/tags/1.1.20/includes/admin/payouts/class-list-table-payments.php

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.1

EPSS0.0107

SSVC