Description The affiliates-manager plugin before 2.6.6 for WordPress has CSRF. References https://wordpress.org/plugins/affiliates-manager/#developers https://wpvulndb.com/vulnerabilities/9335