Advisories · Technology

Lora77 WpZon – Amazon Affiliate Plugin.

Every CVE that names Lora77 WpZon – Amazon Affiliate Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-46506 CVE record

CVSS 7.1 High

WordPress WpZon – Amazon Affiliate Plugin plugin <= 1.3 - CSRF to XSS vulnerability
- Lora77 WpZon – Amazon Affiliate Plugin
- Cross-site request forgery (CSRF)
Not analysed yet 24 Apr 2025