Affiliate For Woocommerce

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36284 MEDIUM This Month

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Affiliate For Woocommerce

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2022-25649 HIGH This Week

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Affiliate For Woocommerce

NVD

CVSS 3.1

8.8

EPSS

0.7%

CVE-2022-36284

EPSS 1% CVSS 6.5

MEDIUM This Month

Authentication Bypass WordPress Affiliate For Woocommerce

NVD

CVE-2022-25649

EPSS 1% CVSS 8.8

HIGH This Week

WordPress Privilege Escalation Affiliate For Woocommerce

NVD