Skip to content
OpenAdvisories
High · 7.1 CVE-2025-14361 EUVD-2025-209937GHSA-vfhv-g4cg-63x2

WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Settings Change vulnerability

Published May 26, 2026 · Updated May 27, 2026 · Assigned by Patchstack

Vendor: AA-Team Product: Woocommerce Envato Affiliates Category: Web / CMS

Description

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Woocommerce Envato Affiliates: from n/a through 1.2.1.

Affected products

VendorProductAffectedFixed
AA-Team Woocommerce Envato Affiliates ≤ 1.2.1 —

References