Affiliates Manager

Vulnerabilities 19Slug affiliates-managerLatest version 2.9.50WordPress.org →

Minimum safe version

2.9.35

Update to 2.9.35 or later to address 19 fixable vulnerabilities

Latest available2.9.50 ✓
Medium 4.3
2024-12-28< 2.9.32

WordPress Affiliates Manager Plugin <= 2.9.31 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
Medium 5.3
2024-12-28< 2.9.31

WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure

PatchstackCVEWordfenceWPScan
N/A
< 2.9.14

Affiliates Manager &lt; 2.9.14 - Reflected Cross-Site Scripting

WPScan
N/A
< 2.9.14

Affiliates Manager &lt; 2.9.14 - Arbitrary Affiliates &amp; Creatives Deletion via CSRF

WPScan
N/A
2020-09-11< 2.7.8

Affiliates Manager <= 2.7.7 - Cross-Site Scripting

Wordfence
N/A
2022-08-16< 2.9.14

Affiliates Manager <= 2.9.13 - Reflected Cross-Site Scripting

Wordfence
N/A
2022-08-16< 2.9.14

Affiliates Manager <= 2.9.13 - Cross-Site Request Forgery

Wordfence
N/A
< 2.7.8

Affiliate Manager &lt; 2.7.8 - Unauthenticated Stored Cross-Site Scripting (XSS)

WPScan
N/A
2022-08-16< 2.9.14

WordPress Affiliates Manager Plugin <= 2.9.13 - Arbitrary Affiliates & Creatives Deletion via CSRF vulnerability

Patchstack
N/A
2022-08-16< 2.9.14

WordPress Affiliates Manager Plugin <= 2.9.13 - Reflected Cross-Site Scripting vulnerability

Patchstack
N/A
2019-06-16< 2.6.6

WordPress Affiliates Manager plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability

Patchstack
N/A
2021-12-23< 2.9.0

WordPress Affiliates Manager plugin <= 2.8.9 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Patchstack