Lucene search
+L

43 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/22 12:00 a.m.•9 views

CVE-2025-46231: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Cross Site Request Forgery.This issue affects affiliate-toolkit: from n/a through = 3.7.3...

8.8CVSS8.5AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/10 6:15 p.m.•55 views

CVE-2024-37205

Insertion of Sensitive Information into Log File vulnerability in SERVIT Software Solutions.This issue affects affiliate-toolkit: from n/a through 3.4.4...

5.3CVSS0.00443EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/10 5:50 p.m.•46 views

CVE-2024-37205 WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in SERVIT Software Solutions.This issue affects affiliate-toolkit: from n/a through 3.4.4...

5.3CVSS0.00443EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/10 5:50 p.m.•84 views

CVE-2024-37205

CVE-2024-37205 affects the WordPress affiliate-toolkit plugin up to version 3.4.4. The issue is the insertion of sensitive information into log files, which may expose data. CVSS v3.1 base score 5.3 (Medium). Patch status in the connected data shows Patched; no exploit details are provided.

5.3CVSS5.8AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/10 5:50 p.m.•23 views

CVE-2024-37205 WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in SERVIT Software Solutions.This issue affects affiliate-toolkit: from n/a through 3.4.4...

5.3CVSS5.8AI score0.00443EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/10 12:00 a.m.•10 views

CVE-2024-37205: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in SERVIT Software Solutions.This issue affects affiliate-toolkit: from n/a through 3.4.4...

5.3CVSS5.8AI score0.00443EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/27 12:15 p.m.•24 views

CVE-2024-29817

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit allows Stored XSS.This issue affects affiliate-toolkit: from n/a through 3.4.5...

6.5CVSS6.4AI score0.00339EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/27 11:56 a.m.•34 views

CVE-2024-29817 WordPress affiliate-toolkit – WordPress Affiliate Plugin plugin <= 3.4.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit allows Stored XSS.This issue affects affiliate-toolkit: from n/a through 3.4.5...

6.5CVSS6.6AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 11:56 a.m.•72 views

CVE-2024-29817

CVE-2024-29817 affects the WordPress plugin affiliate-toolkit (affiliate-toolkit – WordPress Affiliate Plugin). It is a Stored Cross‑Site Scripting vulnerability caused by improper input neutralization during web page generation, specifically related to the ratings/input handling path. Affected v...

6.5CVSS8.2AI score0.00339EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•7 views

CVE-2024-29817: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit allows Stored XSS.This issue affects affiliate-toolkit: from n/a through 3.4.5...

6.5CVSS8.4AI score0.00339EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/19 8:15 p.m.•26 views

CVE-2023-45105

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9...

6.1CVSS0.00479EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/19 8:15 p.m.•34 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9...

5.8CVSS7.1AI score0.00479EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/19 7:48 p.m.•120 views

CVE-2023-45105

CVE-2023-45105 is an Open Redirect vulnerability in the WordPress plugin affiliate-toolkit – WordPress Affiliate Plugin for versions ≤ 3.3.9. The root cause is insufficient URL validation in the plugin’s redirect flow (atkpout.php), allowing unauthenticated attackers to redirect users to untruste...

6.1CVSS7AI score0.00479EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•7 views

CVE-2023-45105: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9...

6.1CVSS7.1AI score0.00479EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/30 4:15 p.m.•28 views

CVE-2023-46086

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

7.1CVSS0.00412EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/11/30 4:15 p.m.•22 views

CVE-2023-46086

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

6.1CVSS7AI score0.00412EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/30 4:15 p.m.•36 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

5.8CVSS7.1AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/30 3:50 p.m.•47 views

CVE-2023-46086 WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.4.3...

7.1CVSS7.2AI score0.00412EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/30 3:50 p.m.•125 views

CVE-2023-46086

CVE-2023-46086 affects the WordPress plugin “affiliate-toolkit – WordPress Affiliate Plugin” (v

7.1CVSS7AI score0.00412EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/05/10 8:15 a.m.•21 views

CVE-2023-23786

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Christof Servit affiliate-toolkit plugin = 3.3.3 versions...

5.4CVSS6.7AI score0.00358EPSS
SaveExploits0References1
Rows per page
Query Builder