Affiliate-toolkit (Unknown) - vulnerabilities (CVEs)

3 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-16. Vendor: Unknown.

CVEs of Affiliate-toolkit

• CVE-2026-110179 - CVSS 6.8 (medium), 2026-10-16: The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and…
• CVE-2026-86787 - CVSS 7.2 (high), 2026-10-14: The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine…
• CVE-2023-5877 - CVSS 9.8 (critical), 2024-01-01: The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's…