AffiliateWP vulnerabilities
We track 1 vulnerability in AffiliateWP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest AffiliateWP vulnerabilities
- 7.5 High severity
AffiliateWP: Improper Neutralization of Special Elements used in an SQL Command
The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in all versions up to, and including, 2.28.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on