iovamihai Affiliate Program Suite — SliceWP Affiliates

• CVE-2026-120043 High 7.5 Affiliate Program Suite <= 1.2.14 - Unauthenticated SQL Injection via 'email' Parameter –
• CVE-2026-6672 Medium 6.4 Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode 0.2%
• CVE-2024-12454 Medium 6.1 Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting 0.2%
• CVE-2024-8714 Medium 6.1 WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting 0.5%