CVE-2026-6672

creationtimestamp| type| source ---|---|--- 2026-05-06 10:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6i676cax2p 2026-05-09 02:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlf7epospu2h...

CVE-2026-6672

The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1.2.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes in the...