Unknown Ecommerce Affiliate vulnerabilities

• unknown ecommerce affiliate Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force CVE-2026-106015 8.1 HighNovember 8, 2026