Skip to content
OpenAdvisories

Vendor

WPCenter

4 known vulnerabilities.

Products

AffiliateX 3 AffiliateX – Amazon Affiliate Plugin 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-65558

    WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability

    Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.

    WPCenter AffiliateX
  • Medium 6.4
    CVE-2025-13859

    AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings

    The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_customization_settings AJAX action in versions 1.0.0 to 1.3.9.3. This makes it possible for authenti…

    WPCenter AffiliateX – Amazon Affiliate Plugin Web / CMS
  • Medium 4.3
    CVE-2025-69346

    WordPress AffiliateX plugin <= 1.3.9.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPCenter AffiliateX affiliatex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AffiliateX: from n/a through <= 1.3.9.3.

    WPCenter AffiliateX
  • Medium 6.5
    CVE-2024-49692

    WordPress AffiliateX plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPCenter AffiliateX affiliatex allows Stored XSS.This issue affects AffiliateX: from n/a through <= 1.2.9.

    WPCenter AffiliateX