Read the docs

Wpaffiliatefeed

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wpaffiliatefeed records in CISA KEV

No Wpaffiliatefeed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tradetracker-store 1 record LOW

Records

1 record

TI-2021-07060 CVE-2021-24778 · GHSA-5xrr-fw23-8wgc

Tradetracker-Store < 4.6.60 - Admin+ SQL Injection

Priority LOW 34

The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01275 Published 2022-03-07 Fixed in 4.6.60 CWE-89
Open these records in search →