Skip to contentCservit Affiliate-toolkit – Multi-network Affiliate & Amazon Product Display vulnerabilities
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' ParameterCVE-2026-1112557.5 High
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' ParameterCVE-2026-1113147.2 High
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' ParameterCVE-2026-127434.9 Medium
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-152966.4 Medium
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code ExecutionCVE-2026-61697.2 High
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit <= 3.6.7 - Reflected Cross-Site ScriptingCVE-2024-106756.1 Medium
- cservit affiliate-toolkit – multi-network affiliate & amazon product displayaffiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product ShortcodeCVE-2024-102276.4 Medium
- servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 moreaffiliate-toolkit <= 3.5.5 - Unauthenticated Full Path DislcosureCVE-2024-65625.3 Medium
- servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 moreaffiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_productCVE-2024-22984.3 Medium
- servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 moreaffiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_listCVE-2024-18516.3 Medium