AF Companion vulnerabilities
We track 1 vulnerability in AF Companion products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest AF Companion vulnerabilities
- 9.1 Critical severity
AF Companion: Improper Control of Generation of Code
The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through one of its import features, allowing users with a low-privileged store-management role to upload arbitrary files, including PHP ones, leading to Remote Code Exe