CVE-2026-65558 Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions

Description

Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.

Affected products and versions

Product	Affected versions	Fixed in
AffiliateX 2.3	earliest → 2.3.5	No fix stated

Other CVEs of AffiliateX

The 3 CVEs of AffiliateX →

CVE-2025-69346 Missing Authorization vulnerability in WPCenter AffiliateX affiliatex allows Exploiting Incorrectly Configured Access… 4.3 Medium CVE-2024-49692 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPCenter… 6.5 Medium