Approved changes feed: RSS · Atom

cpe:2.3:a:storeapps:affiliate_for_woocommerce_(wordpress_plugin):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStoreapps (f3305b7b-3329-5431-b14f-1a5fac7a4755)
ProductAffiliate For Woocommerce (Wordpress Plugin) (5c5417e5-9f65-5fc2-99d9-1f257c3b8bef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36284 vulnerable 2026-06-08 05:46:06.510645 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
MEDIUM (6.4)
Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on the user profile page.
Published: 2022-08-05T15:08:51.582Z
Updated: 2026-04-28T16:07:44.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25649 vulnerable 2026-06-08 05:41:46.226261 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities
MEDIUM (5)
Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.
Published: 2022-08-05T15:07:52.745Z
Updated: 2026-04-28T16:07:39.241Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.