StoreApps Affiliate For WooCommerce (WordPress plugin)

• CVE-2022-36284 Medium 6.4 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change 0.7%
• CVE-2022-25649 Medium 5.0 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities 0.9%