Affiliatex

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-65558 Jul 27, 13:59 MEDIUM This Month

Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX WordPress plugin versions up to 2.3.5 allows remote attackers to

WordPress SSRF Affiliatex Wordpress Plugin

NVD

CVSS 3.1

5.4

EPSS

0.1%

CVE-2024-49692 Oct 29, 11:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPCenter AffiliateX affiliatex allows Stored XSS.2.9. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Affiliatex Wordpress Plugin

NVD VulDB

CVSS 3.1

6.5

EPSS

0.2%

CVE-2026-65558

EPSS 0% CVSS 5.4

MEDIUM This Month

Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX WordPress plugin versions up to 2.3.5 allows remote attackers to

WordPress SSRF Affiliatex +1

NVD

CVE-2024-49692

EPSS 0% CVSS 6.5

MEDIUM This Month

WordPress XSS Affiliatex +1

NVD VulDB