Skip to content
Sign in
5.5 Medium

CVE-2024-5285 The wp-affiliate-platform WordPress plugin before 6.5.2 does not have CSRF check in place when deleting affiliates,…

Description

The wp-affiliate-platform WordPress plugin before 6.5.2 does not have CSRF check in place when deleting affiliates, which could allow attackers to make a logged in user change delete them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
wp-affiliate-platform 6.5 earliest → < 6.5.2 6.5.2
wp-affiliate-platform 6.5 earliest → < 6.5.2 6.5.2

Other CVEs of wp-affiliate-platform

The 8 CVEs of wp-affiliate-platform →
CVE-2024-5286 The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it… 4.8 Medium CVE-2024-5287 The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in place when updating its settings,… 7.1 High CVE-2024-5282 The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it… 6.1 Medium CVE-2024-5283 The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it… 6.1 Medium
Track this CVE