Vulnerabilities

TI-2023-19862 CVE-2023-38482 · GHSA-wrcc-62fg-jgrx

WordPress Post Affiliate Pro Plugin <= 1.25.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QualityUnit Post Affiliate Pro plugin <= 1.25.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-09-03 No fix listed CWE-79

TI-2008-05338 CVE-2008-5630 · GHSA-m252-5c67-5535

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4…

LOW 32

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4 allows remote attackers to execute arbitrary SQL commands via the umprof_status parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01123 Published 2008-12-17 No fix listed CWE-89

TI-2008-04387 CVE-2008-4602 · GHSA-99qf-p549-mmhm

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote…

LOW 33

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02059 Published 2008-10-17 No fix listed CWE-22

Vulnerabilities

Filters

WordPress Post Affiliate Pro Plugin <= 1.25.0 is vulnerable to Cross Site Scripting (XSS)

SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4…

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote…