Andrew Munro / AffiliateWP

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Andrew Munro / AffiliateWP records in CISA KEV

No Andrew Munro / AffiliateWP vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-25048 CVE-2026-32520 · GHSA-j7j8-2m3c-hf7j

WordPress RewardsWP plugin <= 1.0.4 - Privilege Escalation vulnerability

MEDIUM 49

Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through <= 1.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00334 Published 2026-03-25 No fix listed CWE-266

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0