All packages
Affiliates Manager vulnerabilities
4 known CVE vulnerabilities in Affiliates Manager, translated and rated.
- CVE-2026-73355Critical
Unauthenticated SQL Injection vulnerability in Affiliates Manager plugin versions up to 2.9.53. An attacker without authentication can inject SQL queries.
- CVE-2026-73358High
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager versions up to 2.9.53.
- CVE-2026-57654Medium
The Affiliates Manager plugin version 2.9.49 and earlier suffers from a broken access control vulnerability for affiliates. This allows unauthorized users to perform actions they should not have permission to.
- CVE-2026-52692High
Versions of Affiliates Manager up to 2.9.50 have a vulnerability that allows unauthorized access to sensitive data.