SliceWP

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SliceWP records in CISA KEV

No SliceWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affiliate Program Suite 1 record LOW

Records

2 records

TI-2024-08083 CVE-2024-8714 · GHSA-pgmw-5qx3-mhj6

WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting

LOW 28

The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to,…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00462 Published 2024-09-13 No fix listed CWE-79

TI-2024-22748 CVE-2024-34413 · GHSA-g9vc-r3ph-h584

WordPress SliceWP Affiliates plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SliceWP allows Stored XSS.This issue affects SliceWP: from n/a through 1.1.10.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00359 Published 2024-05-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0