Description
Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RelyWP | Coupon Affiliates | ≤ 7.5.3 | — |
High · 7.1
CVE-2026-40770
EUVD-2026-36979GHSA-gm96-jpjv-4px7
WordPress Coupon Affiliates plugin <= 7.5.3 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack