WordPress security by component

Multilevel Referral Affiliate Plugin for WooCommerce

Plugin description

Multilevel Referral Affiliate Plugin for WooCommerce is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Mar 01, 2025; the highest CVE/CNA score is 7.1.

Plugin slug: multilevel-referral-plugin-for-woocommerce

Latest vulnerability

CVE-2024-13750: Multilevel Referral Affiliate Plugin for WooCommerce: SQL injection

Multilevel Referral Affiliate Plugin for WooCommerce is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedMar 01, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 01, 2025	CVE-2024-13750 Multilevel Referral Affiliate Plugin for WooCommerce: SQL injection Multilevel Referral Affiliate Plugin for WooCommerce is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVDPending
Dec 01, 2024	CVE-2024-53742 Multilevel Referral Affiliate Plugin for WooCommerce: Cross-site scripting Multilevel Referral Affiliate Plugin for WooCommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE7.1 NVDPending