<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: cservit-affiliate-toolkit-multi-network-affiliate-amazon-product-display</title><description>Every new CVE for cservit-affiliate-toolkit-multi-network-affiliate-amazon-product-display.</description><link>https://agentprime.io/</link><item><title>CVE-2026-111255: affiliate-toolkit &lt;= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via &apos;atkp_product_largeimageurl&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-111255/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111255/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 03:42:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111314: affiliate-toolkit &lt;= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via &apos;atkp_product_producturl&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-111314/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111314/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 02:29:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12743: affiliate-toolkit &lt;= 3.8.8 - Authenticated (Administrator+) SQL Injection via &apos;orderby&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-12743/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12743/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 05:30:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15296: affiliate-toolkit – WP Affiliate Plugin with Amazon &lt;= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2026-15296/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15296/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 04:31:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6169: affiliate-toolkit &lt;= 3.8.5 - Authenticated (Editor+) Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2026-6169/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6169/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 May 2026 06:46:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10675: affiliate-toolkit &lt;= 3.6.7 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-10675/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10675/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 21 Nov 2024 08:31:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10227: affiliate-toolkit &lt;= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode</title><link>https://agentprime.io/advisories/CVE-2024-10227/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10227/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Oct 2024 09:31:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-6562: affiliate-toolkit &lt;= 3.5.5 - Unauthenticated Full Path Dislcosure</title><link>https://agentprime.io/advisories/CVE-2024-6562/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-6562/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Aug 2024 09:30:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1851: affiliate-toolkit – WordPress Affiliate Plugin &lt;= 3.5.4 - Missing Authorization via atkp_create_list</title><link>https://agentprime.io/advisories/CVE-2024-1851/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1851/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Mar 2024 06:58:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2298: affiliate-toolkit – WordPress Affiliate Plugin &lt;= 3.5.4 - Missing Authorization via atkp_import_product</title><link>https://agentprime.io/advisories/CVE-2024-2298/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2298/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Mar 2024 06:58:06 GMT</pubDate><category>CVE</category></item></channel></rss>