Affiliates Manager (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-09-16. Vendor: Unknown.

CVEs of Affiliates Manager

• CVE-2022-2799 - CVSS 4.8 (medium), 2022-09-16: The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform…
• CVE-2022-2798 - CVSS 8 (high), 2022-09-16: The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to…
• CVE-2021-25078 - CVSS 6.1 (medium), 2022-01-24: The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature,…
• CVE-2021-24844 - CVSS 7.2 (high), 2021-11-08: The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard,…