WordPress security by component
Affiliate For Woocommerce
Plugin description
Affiliate For Woocommerce is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Aug 05, 2022; the highest published CVSS base score is 6.4.
Plugin slug:
affiliate-for-woocommerceLatest vulnerability
CVE-2022-36284: Affiliate For Woocommerce: Broken access control
Affiliate For Woocommerce is affected by broken access control. Exposure depends on how the affected operation is made reachable by the site. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
| Safe version |
|
||
|---|---|---|---|
| Aug 05, 2022 |
CVE-2022-36284
Affiliate For Woocommerce: Broken access control
Affiliate For Woocommerce is affected by broken access control. Exposure depends on how the affected operation is made reachable by the site. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVE6.4
NVD6.5
|
| Aug 05, 2022 |
CVE-2022-25649
Affiliate For Woocommerce: A security weakness
Affiliate For Woocommerce is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVE5.0
NVD8.8
|