Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Codexpert, Inc Component: Wc Affiliate Clear all filters
TI-2024-11443 CVE-2024-12336 · GHSA-5jx7-r789-wq9q

Missing authorization in Codexpert, Inc WC Affiliate – WooCommerce Affiliate Plugin

Priority LOW 29

The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2025-03-15 No fix listed CWE-862
TI-2024-11428 CVE-2024-12321 · GHSA-mj6j-32rm-jv58

WC Affiliate <= 2.3.9 - Reflected XSS

Priority MEDIUM 64

The WC Affiliate WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00285 Published 2025-01-27 No fix listed CWE-79
TI-2024-11441 CVE-2024-12334 · GHSA-x7qc-wx3v-p86v

WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting

Priority LOW 27

The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input saniti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0029 Published 2025-01-26 No fix listed CWE-79