Advisories · Technology

affiliate-toolkit.

Every CVE that names affiliate-toolkit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110179 CVE record

CVSS 6.8 Medium

affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby Parameter
- affiliate-toolkit
- SQL injection
Not analysed yet 16 Oct 2026
CVE-2026-86787 CVE record

CVSS 7.2 High

Affiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directive
- affiliate-toolkit
- Code injection
Not analysed yet 14 Oct 2026
CVE-2023-5877 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
- affiliate-toolkit
Not analysed yet 1 Jan 2024