CVE Catalog
CVE-2026-73355
CriticalCVSS 9.3Summary
Unauthenticated SQL Injection vulnerability in Affiliates Manager plugin versions up to 2.9.53. An attacker without authentication can inject SQL queries.
Risk Assessment
Potential unauthorized access to the database, data leakage or modification.
Recommendation
Update the Affiliates Manager plugin to a version newer than 2.9.53.
Original NVD description (English source)
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.