WordPress security by component

WordPress & WooCommerce Affiliate Program

Plugin description

WordPress & WooCommerce Affiliate Program is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 01, 2024; the highest CVE/CNA score is 9.8.

Plugin slug: affiliate-pro

Latest vulnerability

CVE-2024-9289: WordPress & WooCommerce Affiliate Program: Privilege escalation or authentication bypass

WordPress & WooCommerce Affiliate Program is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.

PublishedOct 01, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 01, 2024	CVE-2024-9289 WordPress & WooCommerce Affiliate Program: Privilege escalation or authentication bypass WordPress & WooCommerce Affiliate Program is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE9.8 NVDPending