1741 matches found
CVE-2025-57943
CVE-2025-57943 describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Skimlinks Affiliate Marketing Tool (skimlinks). The issue affects the plugin as installed in versions from n/a through
CVE-2025-57944
CVE-2025-57944 is a Missing Authorization vulnerability in the Skimlinks Affiliate Marketing Tool (WordPress plugin Skimlinks) that allows access to functionality not properly constrained by ACLs. The vulnerability affects Skimlinks Affiliate Marketing Tool (from n/a through 1.3) and has a CVSS v...
CVE-2025-57943 WordPress Skimlinks Affiliate Marketing Tool Plugin <= 1.3 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool allows Server Side Request Forgery. This issue affects Skimlinks Affiliate Marketing Tool: from n/a through 1.3...
CVE-2025-57943 WordPress Skimlinks Affiliate Marketing Tool plugin <= 1.3.1 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool skimlinks allows Server Side Request Forgery.This issue affects Skimlinks Affiliate Marketing Tool: from n/a through = 1.3.1...
CVE-2025-57943: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool skimlinks allows Server Side Request Forgery.This issue affects Skimlinks Affiliate Marketing Tool: from n/a through = 1.3.1...
CVE-2025-57944: Missing Authorization
Missing Authorization vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool skimlinks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Skimlinks Affiliate Marketing Tool: from n/a through = 1.3...
PT-2025-38794
Name of the Vulnerable Software and Affected Versions Skimlinks versions through 1.3 Description A missing authorization issue exists in the Skimlinks Affiliate Marketing Tool. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations...
PT-2025-38793
Name of the Vulnerable Software and Affected Versions Skimlinks Affiliate Marketing Tool versions through 1.3 Description The Skimlinks Affiliate Marketing Tool contains a Server-Side Request Forgery SSRF issue. This allows for Server Side Request Forgery. The affected product does not specify a...
CVE-2025-10002: Improper Neutralization of Special Elements used in an SQL Command
The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2025-48306
Cross-Site Request Forgery CSRF vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate Partner: from n/a through = 2.1.4...
CVE-2025-48306
Cross-Site Request Forgery CSRF vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate Partner: from n/a through = 2.1.4...
CVE-2025-48306
CVE-2025-48306 describes a CSRF to Stored XSS vulnerability in the WordPress plugin Savyour Affiliate Partner (versions up to 2.1.4). The CVSS 3.1 base score is 7.1 (High); attack vector is NETWORK with LOW attack complexity, NONE privileges, user interaction required, and within a changed scope,...
CVE-2025-48306 WordPress Savyour Affiliate Partner plugin <= 2.1.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate Partner: from n/a through = 2.1.4...
CVE-2025-48306 WordPress Savyour Affiliate Partner plugin <= 2.1.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate Partner: from n/a through = 2.1.4...
PT-2025-34995
Name of the Vulnerable Software and Affected Versions: Savyour Affiliate Partner versions through 2.1.4 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Savyour Affiliate Partner, which also allows Stored Cross-Site Scripting XSS. Recommendations: Update Savyour Affiliate...
WordPress plugin Savyour Affiliate Partner 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2025-48306: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate Partner: from n/a through = 2.1.4...
WordPress Savyour Affiliate Partner plugin <= 2.1.4 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Savyour Affiliate Partner versions = 2.1.4...
Dark Web Roast - July 2025 Edition
Dark Web Roast - July 2025 Edition By Trellix Advanced Research Center · August 19, 2025 Executive Summary July 2025 delivered a masterclass in cybercriminal mediocrity that would make even the most charitable threat intelligence analyst weep into their coffee. After extensive hunts across the da...
