Vendors / WPCenter Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now WPCenter records in CISA KEV No WPCenter vulnerabilities are listed in CISA KEV.
Priority LOW 28
The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_customization_settings AJAX action in versions 1.0.0 to 1.3.9…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00198 · Published 2026-01-15 · No fix listed CWE-862
Priority LOW 24
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.
CVSS 3.1 MEDIUM 5.4· Network · No auth · No interaction · EPSS 0.00217 · Published 2026-07-27 · No fix listed CWE-918
Priority LOW 19
Missing Authorization vulnerability in WPCenter AffiliateX affiliatex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AffiliateX: from n/a through <= 1.3.9.3.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00181 · Published 2026-01-06 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 0 3 0 0
