affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

Güvenlik açıkları

• CVE-2025-46231

  WordPress affiliate-toolkit plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) Vulnerability

  Yüksek 8.8

• CVE-2026-6169

  affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution

  Yüksek 7.2

• CVE-2024-29817

  WordPress affiliate-toolkit – WordPress Affiliate Plugin plugin <= 3.4.5 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-1851

  affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list

  Orta 6.5

• CVE-2026-15296

  affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-10227

  affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode

  Orta 6.4

• CVE-2024-10675

  affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2023-45105

  WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open Redirection

  Orta 6.1

• CVE-2023-46086

  WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2023-23786

  WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2024-6562

  affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure

  Orta 5.3

• CVE-2024-37205

  WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability

  Orta 5.3

• CVE-2026-12743

  affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

  Orta 4.9

• CVE-2024-2298

  affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product

  Orta 4.3