Not rated

CVE-2021-24844 The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL…

Description

The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL Injection issue

Affected products and versions

Product	Affected versions	Fixed in
Affiliates Manager 2.8	earliest → < 2.8.7	2.8.7

The 4 CVEs of Affiliates Manager →

CVE-2022-2799 The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could… Not rated CVE-2022-2798 The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could… Not rated CVE-2021-25078 The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests… Not rated

Do you use Affiliates Manager?

Track this CVE Watch Affiliates Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2021-24844

Timeline

Published November 8, 2021
Last modified August 3, 2024

References

wpscan.com wpscan.com
plugins.trac.wordpress.org plugins.trac.wordpress.org

Track this CVE

CVE-2021-24844 The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL…

Description

Affected products and versions

Other CVEs of Affiliates Manager