Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: wecantrack Clear all filters
TI-2025-23704 CVE-2025-32639 · GHSA-p35x-v2w9-c8gg

WordPress Affiliate Links plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wecantrack Affiliate Links Lite affiliate-links allows Reflected XSS.This issue affects Affiliate Links Lite: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2024-12597 CVE-2024-13556 · GHSA-7229-ccxj-3pgp

Missing authorization in wecantrack Affiliate Links – Link Cloaking and Management

Priority MEDIUM 44

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input fr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2025-02-18 No fix listed CWE-862