Cservit - vulnerabilities (CVEs)
10 CVEs in 1 products, 2 in the last 30 days, newest from 2026-10-28.
Products
Newest CVEs of Cservit
- CVE-2026-111255 - CVSS 7.5 (high), 2026-10-28: The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to,…
- CVE-2026-111314 - CVSS 7.2 (high), 2026-10-28: The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
- CVE-2026-12743 - CVSS 4.9 (medium), 2026-08-14: The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby'…
- CVE-2026-15296 - CVSS 6.4 (medium), 2026-07-10: The affiliate-toolkit – WP Affiliate Plugin with Amazon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'atkp_product'…
- CVE-2026-6169 - CVSS 7.2 (high), 2026-05-27: The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the plugin using…
- CVE-2024-10675 - CVSS 6.1 (medium), 2024-11-21: The affiliate-toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via a URL in all versions up to, and including, 3.6.7 due to…
- CVE-2024-10227 - CVSS 6.4 (medium), 2024-10-29: The affiliate-toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's atkp_product shortcode in all versions up to, and…
- CVE-2024-6562 - CVSS 5.3 (medium), 2024-08-12: The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.5.5.…
- CVE-2024-2298 - CVSS 4.3 (medium), 2024-03-08: The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the…
- CVE-2024-1851 - CVSS 6.5 (medium), 2024-03-08: The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the…
