Skip to content
OpenAdvisories

Vendor

worschtebrot

3 known vulnerabilities.

Products

Affiliate Super Assistent 2 Post Status Notifier Lite 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-19573

    Affiliate Super Assistent <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function

    The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possib…

    worschtebrot Affiliate Super Assistent Web / CMS
  • High 7.3
    CVE-2024-8478

    Affiliate Super Assistent <= 1.5.3 - Unauthenticated Arbitrary Shortcode Execution

    The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3. This is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' …

    worschtebrot Affiliate Super Assistent Web / CMS