Advisories · Technology

nestornoe Amazon affiliate lite Plugin.

Every CVE that names nestornoe Amazon affiliate lite Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-14734 CVE record

CVSS 5.4 Medium

Amazon affiliate lite Plugin <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update
- nestornoe Amazon affiliate lite Plugin
- Cross-site request forgery (CSRF)
Not analysed yet 20 Dec 2025
CVE-2025-14735 CVE record

CVSS 4.4 Medium

Amazon affiliate lite Plugin <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
- nestornoe Amazon affiliate lite Plugin
- Cross-site scripting (XSS)
Not analysed yet 20 Dec 2025