Log in Start free

AffiliateWP

Products

ProductCVEsExploitedLatest
AffiliateWP4–Aug 6, 2026

Exploited and recent CVEs

  • CVE-2026-65515 High 7.1 WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57809 High 7.1 WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-8877 High 7.5 AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection 0.4%
  • CVE-2023-4600 Medium 4.3 The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in vers 0.4%