Affiliates Manager < 2.9.0 - Cross Site Scripting

The plugin does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admin viewing the tracked requests. id: CVE-2021-25078 info: name: Affiliates Manager 2.9.0 - Cross...

WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting

WordPress 2kb Amazon Affiliates Store plugin before 2.1.1 contains multiple cross-site scripting vulnerabilities. The plugin allows an attacker to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php, thus making possible the...

CVE-2026-108291

Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...

CVE-2026-108291

The itthinx Affiliates WordPress plugin, versions up to and including 7.0.1 , is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This vulnerability allows an attacker to perform Object Injection , which can lead to significant impacts on confidentiality...

CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...

EUVD-2026-101017

Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...

CVE-2026-108291: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...

WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by AndrewN in WordPress Plugin Affiliates versions = 7.0.1...

CVE-2026-106606

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

CVE-2026-106606

The YITH WooCommerce Affiliates WordPress plugin (versions

CVE-2026-106606 WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

EUVD-2026-96204

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

CVE-2026-106606: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin YITH WooCommerce Affiliates versions = 3.31.0...

CVE-2026-32575

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

CVE-2026-32575

The SUMO Affiliates Pro plugin for WordPress, version

EUVD-2026-93237

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

CVE-2026-32575 WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

CVE-2026-32575 WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

PT-2026-106402

Name of the Vulnerable Software and Affected Versions SUMO Affiliates Pro versions prior to 11.7.1 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...