Affiliates Manager CVEs and Security Vulnerabilities - OpenCVE

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-73358

WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Wordpress Wp.insider

Products

Wordpress Affiliates Manager

CVE-2026-73355

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Wordpress Wp.insider

Products

Wordpress Affiliates Manager

CVE-2026-57654

WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability

Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Wordpress Wp.insider

Products

Wordpress Affiliates Manager

CVE-2026-52692

WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Wordpress Wp.insider

Products

Wordpress Affiliates Manager

Page 1 of 1.