Cservit vulnerabilities

Products

• Affiliate-toolkit – Multi-network Affiliate & Amazon Product Display 10

Newest

• cservit affiliate-toolkit – multi-network affiliate & amazon product display affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter CVE-2026-111255 7.5 HighOctober 28, 2026
• cservit affiliate-toolkit – multi-network affiliate & amazon product display affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parameter CVE-2026-111314 7.2 HighOctober 28, 2026
• cservit affiliate-toolkit – multi-network affiliate & amazon product display affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter CVE-2026-12743 4.9 MediumAugust 14, 2026
• cservit affiliate-toolkit – multi-network affiliate & amazon product display affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-15296 6.4 MediumJuly 10, 2026
• cservit affiliate-toolkit – multi-network affiliate & amazon product display affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution CVE-2026-6169 7.2 HighMay 27, 2026
• cservit affiliate-toolkit – multi-network affiliate & amazon product display affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting CVE-2024-10675 6.1 MediumNovember 21, 2024
• cservit affiliate-toolkit – multi-network affiliate & amazon product display affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode CVE-2024-10227 6.4 MediumOctober 29, 2024
• servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 more affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure CVE-2024-6562 5.3 MediumAugust 9, 2024
• servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 more affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product CVE-2024-2298 4.3 MediumMarch 8, 2024
• servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 more affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list CVE-2024-1851 6.3 MediumMarch 8, 2024