Affiliate Super Assistent
Approved changes feed: RSS · Atom
cpe:2.3:a:ifeelweb:affiliate_super_assistent:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Ifeelweb (2a12810b-4880-573b-9730-cabca1670fe3) |
|---|---|
| Product | Affiliate Super Assistent (237045e6-6a66-55a2-8437-491b3303fb84) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8478 |
vulnerable | 2026-06-08 07:00:24.733621 |
Affiliate Super Assistent <= 1.5.3 - Unauthenticated Arbitrary Shortcode Execution
HIGH (7.3)
The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3. This is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' option is enabled. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Published: 2024-09-10T02:05:14.205Z
Updated: 2026-04-08T17:03:20.350Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27417 |
vulnerable | 2026-06-08 05:57:41.537171 |
WordPress Affiliate Super Assistent Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Timo Reith Affiliate Super Assistent plugin <= 1.5.1 versions.
Published: 2023-11-12T22:57:57.303Z
Updated: 2026-04-28T16:08:13.031Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.