Extension WordPress
Vulnérabilités AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking
Cette page rassemble les failles publiées pour AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking
3 fiches
AffiliateX 1.0.0 – 1.3.9.3 – Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings
The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_customization_settings AJAX action in versions 1.0.0 to 1.3.9.3. This makes it possible for authenticated…
1.0.0-1.3.9.3
1.4.0
15/01/2026
AffiliateX <= 1.3.9.3 – Missing Authorization
The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.3.9.3. This makes it possible for authenticated attackers,…
*-1.3.9.3
1.4.0
06/01/2026
AffiliateX <= 1.2.9 – Authenticated (Contributor+) Stored Cross-Site Scripting
The AffiliateX plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-1.2.9
1.2.9.1
21/10/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.