Description
Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wp.insider | Affiliates Manager | ≤ 2.9.49 | — |
Medium · 6.5
CVE-2026-57654
EUVD-2026-39769GHSA-8ph7-m94w-6fwc
WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability
Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack