WPCenter

Products

ProductCVEsExploitedLatest
AffiliateX3–Jul 27, 2026
AffiliateX – Amazon Affiliate Plugin1–Jan 15, 2026

Exploited and recent CVEs

  • CVE-2026-65558 Medium 5.4 WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2025-13859 Medium 6.4 AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings 0.2%
  • CVE-2025-69346 Medium 4.3 WordPress AffiliateX plugin <= 1.3.9.3 - Broken Access Control vulnerability 0.2%
  • CVE-2024-49692 Medium 6.5 WordPress AffiliateX plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability 0.3%