RedefiningTheWeb

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

RedefiningTheWeb records in CISA KEV

No RedefiningTheWeb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affiliate Pro 1 record MEDIUM Pdf Generator Addon For Elementor Page Builder 1 record LOW

Records

1 record in Affiliate Pro · all components

TI-2024-08622 CVE-2024-9289 · GHSA-4gvj-wfph-8c6j

WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation

MEDIUM 50

The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0058 Published 2024-10-01 No fix listed CWE-288

Open these records in search →

Critical	3
High	3
Medium	4
Low	0
No CVSS	0