Ecommerce Affiliate vulnerabilities
We track 1 vulnerability in Ecommerce Affiliate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Ecommerce Affiliate vulnerabilities
- 8.1 High severity
Ecommerce Affiliate: Improper Authentication
The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, nor limit verification attempts, allowing unauthenticated attackers to take over any account, including admini