Description
Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin <= 2.9.20 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wp.insider, wpaffiliatemgr | Affiliates Manager | ≤ 2.9.20 | — |
Medium · 5.4
CVE-2023-28986
EUVD-2023-32604GHSA-9x7r-76q2-9pj5
WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)
Published Jul 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack