Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-32558 EUVD-2026-64804GHSA-8fhj-262x-44vc

WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

Published Aug 24, 2026 · Updated Aug 24, 2026 · Assigned by Patchstack

Vendor: RedefiningTheWeb Product: Affiliate Pro - Affiliate Program for WooCommerce & WordPress Category: Web / CMS

Description

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.

Affected products

VendorProductAffectedFixed
RedefiningTheWeb Affiliate Pro - Affiliate Program for WooCommerce & WordPress ≤ 8.9.1 —

References