Advisories · Technology

wp.insider Affiliates Manager.

Every CVE that names wp.insider Affiliates Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73358 CVE record

CVSS 7.1 High

WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability
- wp.insider Affiliates Manager
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2026
CVE-2026-73355 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability
- wp.insider Affiliates Manager
- SQL injection
Not analysed yet 18 Aug 2026
CVE-2026-57654 CVE record

CVSS 6.5 Medium

WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability
- wp.insider Affiliates Manager
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-52692 CVE record

CVSS 7.5 High

WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability
- wp.insider Affiliates Manager
- Information disclosure
Not analysed yet 15 Jun 2026