CVE-2026-65515

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...

CVE-2026-65515

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...

CVE-2026-65515 WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...

CVE-2026-65515 WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...

CVE-2026-65515

The CVE-2026-65515 entry concerns the WordPress AffiliateWP plugin, affected version

CVE-2026-65515: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...

WordPress Plugin AffiliateWP Cross-site Script Vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed to enhance functionality of the platform. The WordPress plugin AffiliateWP h...

WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure Detection

Exposed debug log in AffiliateWP Wordpress Plugin !/usr/bin/env python3 -- coding: utf-8 -- """Exposed debug log in AffiliateWP Wordpress Plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Plugin...

WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin AffiliateWP versions = 2.35.0...

PT-2026-68538

Name of the Vulnerable Software and Affected Versions AffiliateWP versions prior to 2.35.1 Description The AffiliateWP plugin for WordPress contains a Stored Cross-Site Scripting XSS flaw. This occurs because the software fails to properly sanitize input and escape output, allowing unauthenticate...

CVE-2026-57809

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...

CVE-2026-57809

The CVE-2026-57809 entry describes an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress AffiliateWP plugin up to version 2.34.0 . Affected component is the plugin’s input handling leading to reflected XSS; the issue is exploitable without authentication. Official...

EUVD-2026-48184

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...

CVE-2026-57809 WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...

CVE-2026-57809 WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...

CVE-2026-57809: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...

PT-2026-63842

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...

WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin AffiliateWP versions = 2.34.0...

CVE-2026-32520

Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through = 1.0.4...

PT-2026-28034

Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through = 1.0.4...