Vulnerabilities

TI-2026-00805 CVE-2026-1073 · GHSA-q3hq-vr59-65q2

Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update

LOW 19

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00147 Published 2026-03-07 No fix listed CWE-352

TI-2025-42300 CVE-2025-68841 · GHSA-3h5g-fffj-jhx9

WordPress TopperPack – Complete Elementor Addons, theme & CPT Builder plugin <= 1.2.1…

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themepul TopperPack – Complete Elementor Addons, Theme & CPT Builder topper-pack allows PHP Local F…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00445 Published 2026-02-20 No fix listed CWE-98

Vulnerabilities

Filters

Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update

WordPress TopperPack – Complete Elementor Addons, theme & CPT Builder plugin <= 1.2.1…