Skip to content
OpenAdvisories

Vendor

iova.mihai

9 known vulnerabilities.

Products

Affiliate Program Suite — SliceWP Affiliates 4 SliceWP 4 Social Pug: Author Box 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-6672

    Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode

    The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1.2.7. This is due to insufficient input sanitization and output escaping on user…

    iova.mihai Affiliate Program Suite — SliceWP Affiliates Web / CMS
  • Medium 6.1
    CVE-2024-12454

    Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

    The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.23. This is due to missing or incorrect nonce validation on a function. This makes it possible for unau…

    iova.mihai Affiliate Program Suite — SliceWP Affiliates Web / CMS
  • Medium 6.1
    CVE-2024-8714

    WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting

    The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.20. This makes it po…

    iova.mihai Affiliate Program Suite — SliceWP Affiliates Web / CMS