Lucene search
+L

115 matches found

NVD
NVD
•added 2023/12/19 8:15 p.m.•19 views

CVE-2023-45105

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9...

6.1CVSS0.00479EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/19 8:15 p.m.•28 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9...

5.8CVSS7.1AI score0.00479EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/19 7:48 p.m.•113 views

CVE-2023-45105

CVE-2023-45105 is an Open Redirect vulnerability in the WordPress plugin affiliate-toolkit – WordPress Affiliate Plugin for versions ≤ 3.3.9. The root cause is insufficient URL validation in the plugin’s redirect flow (atkpout.php), allowing unauthenticated attackers to redirect users to untruste...

6.1CVSS7AI score0.00479EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/19 7:48 p.m.•36 views

CVE-2023-45105 WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9...

4.7CVSS6.5AI score0.00479EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/19 12:00 a.m.•4 views

PT-2023-29405

Name of the Vulnerable Software and Affected Versions affiliate-toolkit – WordPress Affiliate Plugin versions 3.3.9 and earlier Description The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the affiliate-toolkit...

6.1CVSS5.8AI score0.00479EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•5 views

CVE-2023-45105: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9...

6.1CVSS6.3AI score0.00479EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/30 4:15 p.m.•24 views

CVE-2023-46086

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

7.1CVSS0.00412EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/30 4:15 p.m.•31 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

5.8CVSS7.1AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/30 3:50 p.m.•40 views

CVE-2023-46086 WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

7.1CVSS7.2AI score0.00412EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•5 views

CVE-2023-46086: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

7.1CVSS6.4AI score0.00412EPSS
SaveExploits0References2
NVD
NVD
•added 2023/08/14 2:15 p.m.•29 views

CVE-2023-30475

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin = 5.4.5 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/14 2:15 p.m.•34 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin = 5.4.5 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/08/14 1:53 p.m.•54 views

CVE-2023-30475

CVE-2023-30475 : Unauthenticated reflected XSS in the WordPress plugin “Coupon Affiliates – WooCommerce Affiliate Plugin” (Coupon Affiliates) up to version 5.4.5. Public sources identify the vulnerability as a reflected cross-site scripting issue triggered via the page parameter, with the exploit...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/14 12:00 a.m.•2 views

PT-2023-22715

Name of the Vulnerable Software and Affected Versions RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin versions = 5.4.5 Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website...

7.1CVSS0.00382EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/14 12:00 a.m.•6 views

CVE-2023-30475: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin = 5.4.5 versions...

7.1CVSS7.1AI score0.00382EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/08/14 12:00 a.m.•18 views

WordPress plugin WooCommerce Affiliate Plugin - Coupon Affiliates Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/26 6:15 a.m.•13 views

CVE-2023-28992

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/26 6:15 a.m.•28 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/26 5:21 a.m.•21 views

CVE-2023-28992 WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/26 5:21 a.m.•54 views

CVE-2023-28992

CVE-2023-28992 is an unauthenticated reflected XSS in the Coupon Affiliates – WooCommerce Affiliate Plugin (RelyWP) up to version 5.4.3. Root cause: untrusted input echoed back without proper sanitization. Impact described as Cross-Site Scripting with potential script execution in affected pages....

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder