Log in Start free

iovamihai

Products

ProductCVEsExploitedLatest
Affiliate Program Suite — SliceWP Affiliates4–Nov 7, 2026

Exploited and recent CVEs

  • CVE-2026-120043 High 7.5 Affiliate Program Suite <= 1.2.14 - Unauthenticated SQL Injection via 'email' Parameter –
  • CVE-2026-6672 Medium 6.4 Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode 0.2%
  • CVE-2024-12454 Medium 6.1 Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting 0.2%
  • CVE-2024-8714 Medium 6.1 WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting 0.5%