Known vulnerabilities in the Affiliate Toolkit plugin
8 security advisories have been published for the Affiliate Toolkit plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Affiliate Toolkit - Cross-Site Scripting (XSS) (CVE-2026-15296) MEDIUM
- Affiliate Toolkit - Remote Code Execution (CVE-2026-6169) HIGH
- Affiliate Toolkit - Cross-Site Scripting (XSS) (CVE-2024-10675) MEDIUM
- Affiliate Toolkit - Cross-Site Scripting (XSS) (CVE-2024-10227) MEDIUM
- Affiliate Toolkit - Broken Access Control (CVE-2024-2298) MEDIUM
- Affiliate Toolkit - Broken Access Control (CVE-2024-1851) MEDIUM
- Affiliate Toolkit - Server-Side Request Forgery (SSRF) (CVE-2023-5877) CRITICAL
- Affiliate Toolkit - Open Redirect (CVE-2023-45105) MEDIUM
- Affiliate Toolkit - Cross-Site Scripting (XSS) (CVE-2023-46086) HIGH