Affiliate For Woocommerce

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36284 Aug 05, 16:15 MEDIUM This Month

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Affiliate For Woocommerce Storeapps

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2022-25649 Aug 05, 16:15 HIGH This Week

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Affiliate For Woocommerce Storeapps

NVD

CVSS 3.1

8.8

EPSS

0.7%

CVE-2022-36284

EPSS 1% CVSS 6.5

MEDIUM This Month

WordPress Authentication Bypass Affiliate For Woocommerce +1

NVD

CVE-2022-25649

EPSS 1% CVSS 8.8

HIGH This Week

WordPress Privilege Escalation Affiliate For Woocommerce +1

NVD