Affiliate Super Assistent vulnerabilities

2 known vulnerabilities in Affiliate Super Assistent from Worschtebrot. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Affiliate Super Assistent: Improper Neutralization of Input During Web Page Generation

  CVE-2026-19573Sep 1, 2026Worschtebrot

  The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possibl

• 7.3 High severity

  Affiliate Super Assistent: Improper Control of Generation of Code

  CVE-2024-8478Sep 10, 2024Worschtebrot

  The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3. This is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' o