Affiliatewp

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-4600 MEDIUM This Month

The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Affiliatewp

NVD

CVSS 3.1

4.3

EPSS

0.3%

CVE-2023-4600

EPSS 0% CVSS 4.3

MEDIUM This Month

The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Affiliatewp

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy