Iovamihai vulnerabilities

Products

• Affiliate Program Suite — Slicewp Affiliates 4
• Paid Membership Subscriptions Effortless Memberships Recurring Payments And Content Restriction 2

Newest

• iovamihai affiliate program suite — slicewp affiliates Affiliate Program Suite <= 1.2.14 - Unauthenticated SQL Injection via 'email' Parameter CVE-2026-120043 7.5 HighNovember 7, 2026
• iovamihai affiliate program suite — slicewp affiliates Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode CVE-2026-6672 6.4 MediumMay 6, 2026
• iovamihai affiliate program suite — slicewp affiliates Affiliate Program Suite — SliceWP Affiliates <= 1.1.23 - Cross-Site Request Forgery to Reflected Cross-Site Scripting CVE-2024-12454 6.1 MediumDecember 18, 2024
• cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, iovamihai paid membership subscriptions effortless memberships recurring payments and content restriction +2 more Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting CVE-2024-9222 6.1 MediumOctober 2, 2024
• iovamihai affiliate program suite — slicewp affiliates, slicewp affiliate program suite +1 more WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting CVE-2024-8714 6.1 MediumSeptember 13, 2024
• cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, iovamihai paid membership subscriptions effortless memberships recurring payments and content restriction +2 more Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return CVE-2024-1389 5.3 MediumFebruary 20, 2024