Read the docs

Awin

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Awin records in CISA KEV

No Awin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Awin Data Feed 2 records LOW Awin - Advertiser Tracking For Woocommerce 1 record LOW

Records

3 records

TI-2025-30130 CVE-2025-47633 · GHSA-ggfc-mrvr-g693

WordPress Awin – Advertiser Tracking for WooCommerce plugin <= 2.0.0 - CSRF to Product Feed Regeneration vulnerability

Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Awin Awin – Advertiser Tracking for WooCommerce awin-advertiser-tracking allows Cross Site Request Forgery.This issue affects Awin – Advertiser Tracking for WooCommerce:…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00191 Published 2025-05-07 No fix listed CWE-352
TI-2022-01796 CVE-2022-1937 · GHSA-24x9-9gx2-3g25

Awin Data Feed < 1.8 - Reflected Cross-Site Scripting

Priority LOW 31

The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a parameter before outputting it back via an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cro…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01833 Published 2022-07-11 Fixed in 1.8 CWE-79
TI-2022-01797 CVE-2022-1938 · GHSA-9xww-pc5r-jrpc

Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 26

The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a header when processing request to generate analytics data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks again…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00729 Published 2022-07-11 Fixed in 1.8 CWE-79
Open these records in search →