Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: SERVIT Software Solutions Clear all filters
TI-2026-69103 CVE-2026-42721 · GHSA-m2c3-6qqh-2gh9

SQL injection in SERVIT affiliate-toolkit WordPress plugin

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects af…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00226 Published 2026-10-07 No fix listed CWE-89
TI-2024-19593 CVE-2024-29817 · GHSA-94hp-8q4r-rqfx

WordPress affiliate-toolkit – WordPress Affiliate Plugin plugin <= 3.4.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SERVIT Software Solutions affiliate-toolkit allows Stored XSS.This issue affects affiliate-toolkit: from n/a through 3…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00339 Published 2024-03-27 No fix listed CWE-79
TI-2024-01723 CVE-2024-1851 · GHSA-m9rc-7xvh-66c4

affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list

Priority LOW 29

The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_create_list() function in all versions up to, and including, 3.5.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00289 Published 2024-03-08 No fix listed CWE-862
TI-2024-02135 CVE-2024-2298 · GHSA-5xf8-64vx-2fcm

affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product

Priority LOW 20

The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_import_product() function in all versions up to, and including, 3…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00321 Published 2024-03-08 No fix listed CWE-862
TI-2023-05412 CVE-2023-5877 · GHSA-3hh9-m6jx-r3jg

affiliate-toolkit < 3.4.3 - Unauthenticated SSRF

Priority HIGH 82

The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00898 Published 2024-01-01 Fixed in 3.4.3 CWE-862
TI-2023-24135 CVE-2023-45105 · GHSA-25x6-5f6g-h9pv

WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open Redirection

Priority LOW 28

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00479 Published 2023-12-19 No fix listed CWE-601
TI-2023-24739 CVE-2023-46086 · GHSA-hw7q-3g3p-cgph

WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affil…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79