WPCenter
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AffiliateX | 3 | – | Jul 27, 2026 |
| AffiliateX – Amazon Affiliate Plugin | 1 | – | Jan 15, 2026 |
Exploited and recent CVEs
- CVE-2026-65558 WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2025-13859 AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings 0.2%
- CVE-2025-69346 WordPress AffiliateX plugin <= 1.3.9.3 - Broken Access Control vulnerability 0.2%
- CVE-2024-49692 WordPress AffiliateX plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability 0.3%