Servit

Affiliate-toolkit

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-46231

  • EPSS 0.09%
  • Veröffentlicht 22.04.2025 09:53:22
  • Zuletzt bearbeitet 30.04.2025 16:29:00

Cross-Site Request Forgery (CSRF) vulnerability in SERVIT Software Solutions affiliate-toolkit allows Cross Site Request Forgery. This issue affects affiliate-toolkit: from n/a through 3.7.3.

5.3

CVE-2024-6562

  • EPSS 0.26%
  • Veröffentlicht 12.08.2024 13:38:39
  • Zuletzt bearbeitet 12.08.2024 13:41:36

The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.5.5. This is due display_errors being set to true . This makes it possible for unauthenticated attac...

5.3

CVE-2024-37205

  • EPSS 0.24%
  • Veröffentlicht 10.07.2024 18:15:04
  • Zuletzt bearbeitet 21.11.2024 09:23:23

Insertion of Sensitive Information into Log File vulnerability in SERVIT Software Solutions.This issue affects affiliate-toolkit: from n/a through 3.4.4.

4.3

CVE-2024-2298

  • EPSS 0.07%
  • Veröffentlicht 08.03.2024 07:15:06
  • Zuletzt bearbeitet 15.01.2025 17:47:00

The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_import_product() function in all versions up to, and including, 3.5.4. This makes it possible f...

6.5

CVE-2024-1851

  • EPSS 0.05%
  • Veröffentlicht 08.03.2024 07:15:05
  • Zuletzt bearbeitet 15.01.2025 17:42:28

The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_create_list() function in all versions up to, and including, 3.5.4. This makes it possible for ...

9.8

CVE-2023-5877

Exploit
  • EPSS 0.45%
  • Veröffentlicht 01.01.2024 15:15:42
  • Zuletzt bearbeitet 03.06.2025 15:15:50

The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL's, in...

6.1

CVE-2023-45105

  • EPSS 0.15%
  • Veröffentlicht 19.12.2023 20:15:08
  • Zuletzt bearbeitet 21.11.2024 08:26:22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9.

6.1

CVE-2023-46086

  • EPSS 0.19%
  • Veröffentlicht 30.11.2023 16:15:10
  • Zuletzt bearbeitet 21.11.2024 08:27:52

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit – WordPress Affil...

5.4

CVE-2023-23786

  • EPSS 0.07%
  • Veröffentlicht 10.05.2023 08:15:11
  • Zuletzt bearbeitet 21.11.2024 07:46:49

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Christof Servit affiliate-toolkit plugin <= 3.3.3 versions.