WordPress security by component
Affiliates Manager
Plugin description
Affiliates Manager is a WordPress component with 11 published CVE records in this archive. The latest tracked vulnerability was published Jun 26, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
affiliates-managerLatest vulnerability
CVE-2026-57654: Affiliates Manager: A security weakness
Affiliates Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.9.49.
| Safe version |
|
||
|---|---|---|---|
| Jun 26, 2026 |
CVE-2026-57654
Affiliates Manager: A security weakness
Affiliates Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.9.49.
|
2.9.50 |
CVE6.5
NVDPending
|
| Jun 15, 2026 |
CVE-2026-52692
Affiliates Manager: A security weakness
Affiliates Manager is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.9.50.
|
2.9.51 |
CVE7.5
NVDPending
|
| Feb 05, 2024 |
CVE-2024-0859
Affiliates Manager: Cross-site request forgery
Affiliates Manager is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD4.3
|
| Jan 05, 2024 |
CVE-2023-52148
Affiliates Manager: A security weakness
Affiliates Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVD5.3
|
| Jan 05, 2024 |
CVE-2023-52130
Affiliates Manager: Cross-site request forgery
Affiliates Manager is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD8.8
|
| Jul 10, 2023 |
CVE-2023-28986
Affiliates Manager: Cross-site request forgery
Affiliates Manager is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVD8.8
|
| Sep 16, 2022 |
CVE-2022-2799
Affiliates Manager: Cross-site scripting
Affiliates Manager is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.8
NVD4.8
|
| Sep 16, 2022 |
CVE-2022-2798
Affiliates Manager: A security weakness
Affiliates Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE8.0
NVD8.0
|
| Jan 24, 2022 |
CVE-2021-25078
Affiliates Manager: Cross-site scripting
Affiliates Manager is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|
| Nov 08, 2021 |
CVE-2021-24844
Affiliates Manager: SQL injection
Affiliates Manager is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.2
NVD7.2
|
| Sep 03, 2019 |
CVE-2019-15868
Affiliates Manager: Cross-site request forgery
Affiliates Manager is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE8.8
NVD8.8
|