CVE-2026-52692
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Versions of Affiliates Manager up to 2.9.50 have a vulnerability that allows unauthorized access to sensitive data.
Risk Assessment
Organizations may be exposed to the disclosure of confidential information, potentially leading to privacy breaches and loss of customer trust.
Recommendation
It is recommended to upgrade to the latest version of Affiliates Manager to mitigate this vulnerability.
Other vulnerabilities in Affiliates Manager
See all- CVE-2026-73355Critical
Unauthenticated SQL Injection vulnerability in Affiliates Manager plugin versions up to 2.9.53. An attacker without authentication can inject SQL queries.
- CVE-2026-73358High
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager versions up to 2.9.53.
- CVE-2026-57654Medium
The Affiliates Manager plugin version 2.9.49 and earlier suffers from a broken access control vulnerability for affiliates. This allows unauthorized users to perform actions they should not have permission to.
Original NVD description (English source)
Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.