CVE-2026-39789

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

EUVD-2026-92956

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

CVE-2026-39789 WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

CVE-2026-39789

The Fluent Affiliate Pro WordPress plugin, version 1.6.4 and below , is vulnerable to an unauthenticated Broken Access Control vulnerability. This flaw is classified as CWE-862: Missing Authorization , allowing an attacker to perform actions without proper authentication. The vulnerability has a ...

CVE-2026-39789 WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

CVE-2026-39789: Missing Authorization

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

PT-2026-106330

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Affiliate Pro versions = 1.6.4...

CVE-2026-32558

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-32558

A critical unauthenticated privilege escalation vulnerability exists in the Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin (versions

CVE-2026-32558 WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-32558 WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

EUVD-2026-64804

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin = 8.9.1 - Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Affiliate Pro - Affiliate Program for WooCommerce & WordPress versions = 8.9.1...

CVE-2026-32558: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

PT-2026-80837

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

VulnCheck KEV: CVE-2026-32558

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-2290

The Post Affiliate Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.28.0. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to initiate arbitrary outbound requests from the...

WordPress Post Affiliate Pro plugin <= 1.28.0 - Authenticated (Administrator+) Server-Side Request Forgery via 'Post Affiliate Pro URL' Field vulnerability

Authenticated Administrator+ Server-Side Request Forgery via 'Post Affiliate Pro URL' Field vulnerability discovered by Phap Nguyen Anh - FIS in WordPress Plugin Post Affiliate Pro versions = 1.28.0...

EUVD-2026-13997

The Post Affiliate Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.28.0. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to initiate arbitrary outbound requests from the...