Itthinx vulnerabilities
We track 2 vulnerabilities in Itthinx products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Itthinx vulnerabilities
- 9.8 Critical severity
Affiliates: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.
- 8.8 High severity
Groups – Memberships and Access Control: Improper Privilege Management
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groups_join() function deriving group-join eligibility from the ambient post's author capabil