Yithemes Woocommerce Affiliate vulnerabilities

1 vulnerability

Known vulnerabilities in Yithemes Woocommerce Affiliate, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2HighCVE-2022-0818unknown · woocommerce affiliate plugin – coupon affiliates +2 moreCoupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSSThe WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.EPSS0.87%