Medium · 5.3 CVE-2023-52148 EUVD-2023-56821GHSA-7hf2-cmmw-j42p

WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure

Published Jan 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wp.insider, wpaffiliatemgr Product: Affiliates Manager

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.30.

Affected products

Vendor	Product	Affected	Fixed
wp.insider, wpaffiliatemgr	Affiliates Manager	≤ 2.9.30	—

References

https://patchstack.com/database/vulnerability/affiliates-manager/wordpress-affiliates-manager-plugin-2-9-30-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve vdb-entry