Advisories · Technology

StoreApps Affiliate For WooCommerce (WordPress plugin).

Every CVE that names StoreApps Affiliate For WooCommerce (WordPress plugin) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36284 CVE record

CVSS 6.4 Medium

WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
- StoreApps Affiliate For WooCommerce (WordPress plugin)
- Broken access control
Not analysed yet 5 Aug 2022
CVE-2022-25649 CVE record

CVSS 5.0 Medium

WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities
- StoreApps Affiliate For WooCommerce (WordPress plugin)
- CWE-264
Not analysed yet 5 Aug 2022