CVE-2026-32558

CriticalCVSS 9.8

Published: 24/08/2026(UTC)Updated: 24/08/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Summary

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress versions up to 8.9.1. An attacker can gain elevated privileges without authentication.

Risk Assessment

Potential takeover of admin accounts and full control over the WooCommerce store.

Recommendation

Update Affiliate Pro to a version newer than 8.9.1 that includes the fix.

Original NVD description (English source)

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.