CVE-2023-38482

CVE-2023-38482 relates to the QualityUnit Post Affiliate Pro WordPress plugin, affected versions:

CVE-2008-5630

CVE-2008-5630 is a SQL injection vulnerability in Post Affiliate Pro versions 3 and 3.1.4, specifically in merchants/index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands through the umprof_status parameter. Connected sources confirm the affected software and the ...

CVE-2008-4602

Post Affiliate Pro 2.0 is affected by a directory traversal vulnerability in index.php. Remote authenticated users can use a .. in the md parameter to read and potentially execute arbitrary local files. CVSS v2 base score 6.5 (Medium) with network access, single authentication, and partial impact...