Skip to content
OpenAdvisories

Vendor

wecantrack

3 known vulnerabilities.

Products

Affiliate Links – Link Cloaking and Management 1 Affiliate Sales in Google Analytics and other tools 1 Affiliate Links Lite 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-32639

    WordPress Affiliate Links plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wecantrack Affiliate Links Lite affiliate-links allows Reflected XSS.This issue affects Affiliate Links Lite: from n/a through <= 3.1.0.

    wecantrack Affiliate Links Lite
  • High 8.1
    CVE-2024-13556

    Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection

    The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input from an file export. This makes it possib…

    wecantrack Affiliate Links – Link Cloaking and Management Web / CMS