Tipsandtricks-hq Wp Affiliate Platform — known CVE vulnerabilities

Every CVE whose affected-product data names Tipsandtricks-hq Wp Affiliate Platform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2022-3898 — CVSS 8.8 (high): The WP Affiliate Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.9. This is…
• CVE-2024-5287 — CVSS 7.1 (high): The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in place when updating its settings, which could allow…
• CVE-2024-5284 — CVSS 6.8 (medium): The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in some places, and is missing sanitisation as well as…
• CVE-2024-5283 — CVSS 6.1 (medium): The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page…
• CVE-2024-5282 — CVSS 6.1 (medium): The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page…
• CVE-2024-5281 — CVSS 6.1 (medium): The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page…
• CVE-2022-3896 — CVSS 6.1 (medium): The WP Affiliate Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER["REQUEST_URI"] in versions up…
• CVE-2024-5285 — CVSS 5.5 (medium): The wp-affiliate-platform WordPress plugin before 6.5.2 does not have CSRF check in place when deleting affiliates, which could allow…
• CVE-2022-3897 — CVSS 5.5 (medium): The WP Affiliate Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and…
• CVE-2024-5286 — CVSS 4.8 (medium): The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page…
• CVE-2024-5280 — CVSS 4.7 (medium): The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in some places, and is missing sanitisation as well as…