CVE-2026-57809 Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions

Description

Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
AffiliateWP 2.34	premières → 2.34.0	Pas de correctif indiqué

Autres CVE de AffiliateWP

Les 5 CVE de AffiliateWP →

CVE-2026-65515 Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions 7.1 Élevée CVE-2025-8877 The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in… 7.5 Élevée CVE-2024-5286 The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it… 4.8 Moyenne CVE-2023-4600 The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on… 4.3 Moyenne