PT-2024-15872 · WordPress · Affiliates Manager

Name of the Vulnerable Software and Affected Versions: Affiliates Manager plugin for WordPress versions up to, and including, 2.9.34 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the process bulk action function in...

WordPress Affiliates Manager Plugin <= 2.9.34 is vulnerable to Cross Site Request Forgery (CSRF)

Software Affiliates Manager Type Plugin Vulnerable versions = 2.9.34 Fixed in 2.9.35 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0859 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3c596216f27c Credits Nathaniel Oh...

Affiliates Manager < 2.9.35 - Cross-Site Request Forgery

Description The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34. This is due to missing or incorrect nonce validation on the processbulkaction function in ListAffiliatesTable.php. This makes it possible for...

VexTrio: The Uber of Cybercrime - Brokering Malware for 60+ Affiliates

The threat actors behind ClearFake, SocGholish, and dozens of other e-crime outfits have established partnerships with another entity known as VexTrio as part of a massive "criminal affiliate program," new findings from Infoblox reveal. The latest development demonstrates the "breadth of their...

CVE-2023-52148

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.30...

CVE-2023-52148

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.30...

Code injection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.30...

CVE-2023-52148

CVE-2023-52148 affects the Affiliates Manager WordPress plugin (wpaffiliatemgr) up to version 2.9.30, exposing sensitive information via log files to unauthorized actors. Multiple sources confirm an information exposure via log files; Red Hat and PatchStack entries align on the managed plugin nam...

CVE-2023-52148 WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.30...

CVE-2023-52148 WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.30...

CVE-2023-52130

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31...

CVE-2023-52130

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31...

CVE-2023-52130 WordPress Affiliates Manager Plugin <= 2.9.31 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31...

CVE-2023-52130

CVE-2023-52130 concerns the WordPress plugin Affiliates Manager (

CVE-2023-52130 WordPress Affiliates Manager Plugin <= 2.9.31 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31...

Affiliates Manager < 2.9.32 - Cross-Site Request Forgery via multiple AJAX actions

Description The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.31. This is due to missing or incorrect nonce validation on multiple AJAX functions. This makes it possible for unauthenticated attackers to approve, decline,...

WordPress Plugin Affiliates Manager Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

PT-2024-14427 · WordPress · Wpaffiliatemgr Affiliates Manager

Name of the Vulnerable Software and Affected Versions: wpaffiliatemgr Affiliates Manager versions 2.9.31 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Affiliates Manager, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

Affiliates Manager < 2.9.31 - Sensitive Information Exposure via Log File

Description The Affiliates Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.30 via the plugin's log files. This makes it possible for unauthenticated attackers to extract sensitive data including plugin configuration and debug...