Description
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wp.insider | Affiliates Manager | ≤ 2.9.53 | — |
Critical · 9.3
CVE-2026-73355
EUVD-2026-60780GHSA-m6xp-8r2q-w62h
WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack