Skip to content
OpenAdvisories
High · 7.1 CVE-2025-48233 EUVD-2025-28153GHSA-5fc3-jmj8-2xvr

WordPress Affiliates Manager Google reCAPTCHA Integration plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Published May 19, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: affmngr Product: Affiliates Manager Google reCAPTCHA Integration

Description

Cross-Site Request Forgery (CSRF) vulnerability in affmngr Affiliates Manager Google reCAPTCHA Integration affiliates-manager-google-recaptcha-integration allows Stored XSS.This issue affects Affiliates Manager Google reCAPTCHA Integration: from n/a through <= 1.0.6.

Affected products

VendorProductAffectedFixed
affmngr Affiliates Manager Google reCAPTCHA Integration ≤ 1.0.6 —

References