Skip to content
OpenAdvisories

Vendor

AffiliateWP

4 known vulnerabilities.

Products

AffiliateWP 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-65515

    WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.

    AffiliateWP AffiliateWP
  • High 7.1
    CVE-2026-57809

    WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.

    AffiliateWP AffiliateWP
  • High 7.5
    CVE-2025-8877

    AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection

    The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in all versions up to, and including, 2.28.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o…

    AffiliateWP AffiliateWP Web / CMS