wp_affiliate_platform vulnerabilities
1 known vulnerability in wp_affiliate_platform from WP Affiliate Platform Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest first
- 7.1 High severity
wp-affiliate-platform: Cross-Site Request Forgery
The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in user change them via a CSRF attack