WordPress security by component

"Amazon affiliate lite Plugin"

Plugin description

"Amazon affiliate lite Plugin" is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Dec 20, 2025; the highest CVE/CNA score is 5.4.

Plugin slug: afiliados-de-amazon-lite

Latest vulnerability

CVE-2025-14735: "Amazon affiliate lite Plugin": Cross-site scripting

"Amazon affiliate lite Plugin" is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedDec 20, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 20, 2025	CVE-2025-14735 "Amazon affiliate lite Plugin": Cross-site scripting "Amazon affiliate lite Plugin" is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.4 NVDPending
Dec 20, 2025	CVE-2025-14734 Amazon affiliate lite Plugin: Cross-site request forgery Amazon affiliate lite Plugin is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE5.4 NVDPending