flowdee
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Amazon Product in a Post | 1 | – | May 7, 2025 |
| EasyAzon | 1 | – | Dec 9, 2024 |
| EasyAzon – Amazon Associates Affiliate Plugin | 1 | – | Jun 6, 2024 |
Exploited and recent CVEs
- CVE-2025-47615 WordPress Amazon Product in a Post plugin <= 5.2.2 - Cross Site Scripting (XSS) Vulnerability 0.3%
- CVE-2023-47780 WordPress EasyAzon – Amazon Associates Affiliate Plugin plugin <= 5.1.0 - Broken Access Control vulnerability 0.3%
- CVE-2023-6956 EasyAzon – Amazon Associates Affiliate Plugin <= 5.1.0 - Reflected Cross-Site Scripting via easyazon-cloaking-locale 0.3%