affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

Güvenlik açıkları

• CVE-2025-46231kimlik doğrulamasız · tıklama gerekir≤ 3.7.3

  WordPress affiliate-toolkit plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) Vulnerability

  Yüksek 8.8

• CVE-2026-6169editör+≤ 3.8.4

  affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution

  Yüksek 7.2

• CVE-2024-29817giriş gerekir≤ 3.4.5

  WordPress affiliate-toolkit – WordPress Affiliate Plugin plugin <= 3.4.5 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-1851abone+≤ 3.5.4

  affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list

  Orta 6.5

• CVE-2026-15296katılımcı+≤ 3.7.0

  affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-10227katılımcı+≤ 3.6.5

  affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode

  Orta 6.4

• CVE-2024-10675kimlik doğrulamasız · tıklama gerekir≤ 3.6.7

  affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2023-45105kimlik doğrulamasız · tıklama gerekir≤ 3.3.9

  WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open Redirection

  Orta 6.1

• CVE-2023-46086kimlik doğrulamasız · tıklama gerekir≤ 3.4.3

  WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2023-23786editör+≤ 3.3.3

  WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2024-6562kimlik doğrulamasız≤ 3.5.5

  affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure

  Orta 5.3

• CVE-2024-37205kimlik doğrulamasız≤ 3.4.4

  WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability

  Orta 5.3

• CVE-2026-12743yönetici≤ 3.8.8

  affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

  Orta 4.9

• CVE-2024-2298abone+≤ 3.5.4

  affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product

  Orta 4.3