Vulnerabilities (CVE)

Filtered by vendor Storeapps Subscribe
Filtered by product Affiliate For Woocommerce
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-25649 1 Storeapps 1 Affiliate For Woocommerce 2024-02-04 N/A 8.8 HIGH
Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.
CVE-2022-36284 1 Storeapps 1 Affiliate For Woocommerce 2024-02-04 N/A 6.5 MEDIUM
Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on the user profile page.