wpcenter vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.2%	CVE-2026-65558AffiliateX (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium5.4EPSS 0.2%2026-07-27CVE Database V5CVE-2026-65558 Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions. EPSS 0.2%Vulnerability WPCenter CWE-918	CVE Database V5	2026-07-27
Medium	6.4	EPSS 0.2%	CVE-2025-13859AffiliateX (WordPress plugin) · Missing Authorization Medium6.4EPSS 0.2%2026-01-15CVE Database V5CVE-2025-13859 The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_customization_settings AJAX action in versions 1.0.0 to 1.3.9.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to store arbitrary JavaScript that executes whenever an AffiliateX block renders on the site. EPSS 0.2%Vulnerability wpcenter CWE-862	CVE Database V5	2026-01-15
Medium	4.3	EPSS 0.2%	CVE-2025-69346AffiliateX (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-01-06CVE Database V5CVE-2025-69346 Missing Authorization vulnerability in WPCenter AffiliateX affiliatex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AffiliateX: from n/a through <= 1.3.9.3. EPSS 0.2%Vulnerability WPCenter	CVE Database V5	2026-01-06
Medium	6.5	EPSS 0.3%	CVE-2024-49692AffiliateX (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-10-29CVE Database V5CVE-2024-49692 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPCenter AffiliateX affiliatex allows Stored XSS.This issue affects AffiliateX: from n/a through <= 1.2.9. EPSS 0.3%Vulnerability WPCenter	CVE Database V5	2024-10-29

Page 1 of 1