PT-2022-9634

Name of the Vulnerable Software and Affected Versions Affiliates Manager WordPress plugin versions prior to 2.9.0 Description The issue allows unauthenticated attackers to perform Cross-Site Scripting attacks against admin users viewing tracked requests due to the lack of validation, sanitization...

CVE-2021-24844: Improper Neutralization of Special Elements used in an SQL Command

The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL Injection issue...