Skip to content
OpenAdvisories

Product · StoreApps

Affiliate For WooCommerce (WordPress plugin)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2022-36284

    WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change

    Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on …

    StoreApps Affiliate For WooCommerce (WordPress plugin) Web / CMS
  • Medium 5.0
    CVE-2022-25649

    WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities

    Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.

    StoreApps Affiliate For WooCommerce (WordPress plugin) Web / CMS