Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display, with AI-generated Chinese analysis, references, and POCs.

Vendor: cservit

CVE IDTitleCVSSSeverityPublished
CVE-2026-12743 affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter CWE-89 4.9 Medium2026-08-14
CVE-2026-15296 affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2026-07-10
CVE-2026-6169 affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution CWE-94 7.2 High2026-05-27
CVE-2024-10675 affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting CWE-79 6.1 Medium2024-11-21
CVE-2024-10227 affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode CWE-79 6.4 Medium2024-10-29
CVE-2024-6562 affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure CWE-200 5.3 Medium2024-08-09
CVE-2024-1851 affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list CWE-862 6.3 Medium2024-03-08
CVE-2024-2298 affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product CWE-862 4.3 Medium2024-03-08

All 8 known CVE vulnerabilities affecting affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display with full Chinese analysis, references, and POCs where available.