CVE-2026-32575

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

CVE-2026-32575

The SUMO Affiliates Pro plugin for WordPress, version

CVE-2026-32575 WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

EUVD-2026-93237

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

Affiliates Manager < 2.9.0 - Cross Site Scripting

The plugin does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admin viewing the tracked requests. id: CVE-2021-25078 info: name: Affiliates Manager 2.9.0 - Cross...

WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting

WordPress 2kb Amazon Affiliates Store plugin before 2.1.1 contains multiple cross-site scripting vulnerabilities. The plugin allows an attacker to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php, thus making possible the...

WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin SUMO Affiliates Pro versions = 11.7.0...

CVE-2026-73358

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

CVE-2026-73355

Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...

EUVD-2026-60782

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

CVE-2026-73358

The Affiliates Manager WordPress plugin (≤2.9.53) is vulnerable to unauthenticated reflected/stored XSS due to insufficient input sanitization, allowing attackers to inject malicious scripts via network-accessible endpoints. CVSS 3.1 scores 7.1 (HIGH) with no privileges required. Exploitation det...

CVE-2026-73358 WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

CVE-2026-73358

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

CVE-2026-73358 WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

EUVD-2026-60780

Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...

CVE-2026-73355 WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...

CVE-2026-73355

Unauthenticated SQL injection affects Affiliates Manager plugin ≤2.9.53, allowing remote attackers to extract sensitive database data (CVSS 9.3 critical). Patchstack reports the flaw; no patch version or exploit details are provided in the documents. Upgrade to the latest plugin version once avai...

CVE-2026-73355 WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...

CVE-2026-73355

Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

SQL Injection vulnerability discovered by 20kilograma in WordPress Plugin Affiliates Manager versions = 2.9.53...