Supercleanse vulnerabilities

Products

• Members – Membership & User Role Editor Plugin 2
• Prettylinks – Affiliate Links, Link Branding, Link Tracking, Marketing And Stripe Payments Plugin 2

Newest

• supercleanse thirstyaffiliates – affiliate links, link branding, link tracking & marketing plugin ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag CVE-2026-119089 7.2 HighOctober 31, 2026
• supercleanse prettylinks – affiliate link management, url shortener, link cloaking, tracking & branded short links PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter CVE-2026-5062 4.9 MediumAugust 5, 2026
• supercleanse members – membership & user role editor plugin Members <= 3.2.22 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel CVE-2026-12426 5.3 MediumJuly 11, 2026
• supercleanse buy now plus — payments with stripe Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-1295 6.4 MediumJanuary 28, 2026
• supercleanse members – membership & user role editor plugin Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2024-11008 5.3 MediumDecember 11, 2024
• caseproof prettylinks, supercleanse prettylinks – affiliate links, link branding, link tracking, marketing and stripe payments plugin +1 more Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update CVE-2024-2326 4.3 MediumMarch 23, 2024
• prettylinks pretty links, supercleanse prettylinks – affiliate links, link branding, link tracking, marketing and stripe payments plugin +1 more Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link CVE-2019-25147 7.2 HighJune 7, 2023