CVE-2026-49068
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Coupon Affiliates versions up to 7.8.1 have a vulnerability that allows the exposure of subscriber sensitive data.
Risk Assessment
The exposure of sensitive data may lead to privacy violations for users and potential financial losses for the organization.
Recommendation
It is recommended to upgrade to the latest version of Coupon Affiliates to mitigate this vulnerability.
Other vulnerabilities in Coupon Affiliates
See all- CVE-2026-40770High
Versions of Coupon Affiliates <= 7.5.3 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.
- CVE-2025-62884Medium
The Coupon Affiliates plugin up to version 7.2.0 has a missing authorization vulnerability, allowing access to functionality not properly constrained by ACLs. This enables unauthorized use of features.
- CVE-2025-59567Medium
The Coupon Affiliates plugin up to version 6.8.0 contains a Missing Authorization vulnerability. This allows exploiting incorrectly configured access control security levels.
Original NVD description (English source)
Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS