cbcvebase.

Redefiningtheweb Affiliate Pro vulnerabilities

1 known vulnerability affecting redefiningtheweb/affiliate_pro.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-9289P2CRITICALCVSS 9.8fixed in 8.5.02024-10-01
CVE-2024-9289 [CRITICAL] CWE-288 CVE-2024-9289: The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication b The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1. This is due to the rtwwwap_login_request_callback() function not properly validating a user's identity prior to authenticating them to the site. This makes it possible for unauthenticated attackers to
nvd
Redefiningtheweb Affiliate Pro vulnerabilities | cvebase