Extension WordPress
Vulnérabilités Affiliate Program Suite , SliceWP Affiliates
Cette page rassemble les failles publiées pour Affiliate Program Suite , SliceWP Affiliates, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Affiliate Program Suite , SliceWP Affiliates
7 fiches
Affiliate Program Suite , SliceWP Affiliates <= 1.2.6 – Unauthenticated Stored Cross-Site Scripting
The Affiliate Program Suite , SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-1.2.6
1.2.7
06/05/2026
Affiliate Program Suite <= 1.2.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode
The Affiliate Program Suite , SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1.2.7. This is due to insufficient input sanitization and output escaping on…
*-1.2.7
1.2.8
05/05/2026
Affiliate Program Suite , SliceWP Affiliates <= 1.1.23 – Cross-Site Request Forgery to Reflected Cross-Site Scripting
The Affiliate Program Suite , SliceWP Affiliates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.23. This is due to missing or incorrect nonce validation on a function. This makes…
*-1.1.23
1.1.24
17/12/2024
SliceWP <= 1.1.18 – Reflected Cross-Site Scripting
The SliceWP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.1.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-1.1.18
1.1.19
30/09/2024
WordPress Affiliates Plugin , SliceWP Affiliates <= 1.1.20 – Reflected Cross-Site Scripting
The WordPress Affiliates Plugin , SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.20. This makes…
*-1.1.20
1.1.21
12/09/2024
WordPress Affiliates Plugin , SliceWP Affiliates <= 1.1.10 – Authenticated (Admin+) Stored Cross-Site Scripting
The WordPress Affiliates Plugin , SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.10 due to insufficient input sanitization and output escaping. This makes it…
*-1.1.10
1.1.11
06/05/2024
WordPress Affiliates Plugin , SliceWP Affiliates <= 1.0.45 – Cross-Site Scripting
The WordPress Affiliates Plugin , SliceWP Affiliates for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘converted’ parameter in versions up to, and including, 1.0.45 due to insufficient input sanitization and output escaping. This makes it possible…
*-1.0.45
1.0.46
09/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.