supercleanse
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Members – Membership & User Role Editor Plugin | 2 | – | Jul 11, 2026 |
| Buy Now Plus — Payments with Stripe | 1 | – | Jan 28, 2026 |
| PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links | 1 | – | Aug 5, 2026 |
| PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin | 1 | – | Mar 23, 2024 |
| ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | 1 | – | Oct 31, 2026 |
Exploited and recent CVEs
- CVE-2026-119089 ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag 0.2%
- CVE-2026-5062 PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter 0.4%
- CVE-2026-12426 Members <= 3.2.22 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel 0.5%
- CVE-2026-1295 Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
- CVE-2024-11008 Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure 0.4%
- CVE-2024-2326 Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update 0.2%