Advisories · Technology

SERVIT Software Solutions affiliate-toolkit.

Every CVE that names SERVIT Software Solutions affiliate-toolkit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42721 CVE record

CVSS 7.6 High

WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability
- SERVIT Software Solutions affiliate-toolkit
- SQL injection
Not analysed yet 7 Oct 2026
CVE-2025-46231 CVE record

CVSS 5.4 Medium

WordPress affiliate-toolkit plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
- SERVIT Software Solutions affiliate-toolkit
- Cross-site request forgery (CSRF)
Not analysed yet 22 Apr 2025
CVE-2024-37205 CVE record

CVSS 5.3 Medium

WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability
- SERVIT Software Solutions affiliate-toolkit
- Information disclosure
Not analysed yet 10 Jul 2024
CVE-2024-29817 CVE record

CVSS 6.5 Medium

WordPress affiliate-toolkit – WordPress Affiliate Plugin plugin <= 3.4.5 - Cross Site Scripting (XSS) vulnerability
- SERVIT Software Solutions affiliate-toolkit
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024