Lucene search
K

59 matches found

EUVD
EUVD
added 2026/04/08 9:31 a.m.3 views

EUVD-2026-20427

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.5.5...

5.9AI score0.0004EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.1 views

CVE-2026-39715

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.5.5...

5.3CVSS0.0004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.0 views

CVE-2026-39715 WordPress AnyTrack Affiliate Link Manager plugin <= 1.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.5.5...

5.8AI score0.0004EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.5 views

CVE-2026-39715

The CVE-2026-39715 issue affects the WordPress plugin AnyTrack Affiliate Link Manager (versions through 1.5.5). A missing/incorrectly configured authorization control allows exploitation of access levels in the plugin. Affected component: plugin logic governing access control for affiliate links....

5.3CVSS5.9AI score0.0004EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.1 views

PT-2026-31277

Name of the Vulnerable Software and Affected Versions AnyTrack Affiliate Link Manager versions through 1.5.5 Description A missing authorization issue exists in AnyTrack Affiliate Link Manager, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

5.8AI score0.0004EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.5 views

WordPress plugin AnyTrack Affiliate Link Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/08 7:57 a.m.5 views

CVE-2026-1073

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...

4.3CVSS5.6AI score0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/07 9:30 a.m.4 views

EUVD-2026-10124

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...

4.3CVSS5.6AI score0.00016EPSS
Exploits0References4
NVD
NVD
added 2026/03/07 8:16 a.m.3 views

CVE-2026-1073

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...

4.3CVSS0.00016EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/07 7:22 a.m.1 views

CVE-2026-1073 Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...

4.3CVSS5.6AI score0.00016EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/07 7:22 a.m.27 views

CVE-2026-1073 Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...

4.3CVSS0.00016EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/07 7:22 a.m.1 views

CVE-2026-1073

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...

4.3CVSS5.6AI score0.00016EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/03/07 2:15 a.m.4 views

WordPress Purchase Button For Affiliate Link plugin <= 1.0.2 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Purchase Button For Affiliate Link versions = 1.0.2...

4.3CVSS5.8AI score0.00016EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/03/07 12:0 a.m.2 views

WordPress plugin Purchase Button For Affiliate Link 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension that can ...

4.3CVSS5.7AI score0.00016EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.3 views

CVE-2025-62077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SEOSEON EUROPE S.L Affiliate Link Tracker affiliate-link-tracker allows Stored XSS.This issue affects Affiliate Link Tracker: from n/a through = 0.2...

5.9CVSS5.4AI score0.00017EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:15 p.m.1 views

CVE-2025-62077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SEOSEON EUROPE S.L Affiliate Link Tracker affiliate-link-tracker allows Stored XSS.This issue affects Affiliate Link Tracker: from n/a through = 0.2...

5.9CVSS0.00017EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.2 views

CVE-2025-62077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SEOSEON EUROPE S.L Affiliate Link Tracker affiliate-link-tracker allows Stored XSS.This issue affects Affiliate Link Tracker: from n/a through = 0.2...

5.9CVSS5.3AI score0.00017EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.16 views

CVE-2025-62077 WordPress Affiliate Link Tracker plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SEOSEON EUROPE S.L Affiliate Link Tracker affiliate-link-tracker allows Stored XSS.This issue affects Affiliate Link Tracker: from n/a through = 0.2...

5.9CVSS0.00017EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.9 views

CVE-2025-62077

The CVE-2025-62077 entry concerns the WordPress Affiliate Link Tracker plugin, affected versions through 0.2. The vulnerability is Stored XSS caused by improper input handling during web page generation, as stated across Red Hat, NVD, CVE records and third-party sources. Impact is defined as stor...

5.9CVSS5.4AI score0.00017EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.3 views

CVE-2025-62077 WordPress Affiliate Link Tracker plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SEOSEON EUROPE S.L Affiliate Link Tracker affiliate-link-tracker allows Stored XSS.This issue affects Affiliate Link Tracker: from n/a through = 0.2...

5.9CVSS5.9AI score0.00017EPSS
Exploits0References1
Rows per page
Query Builder