Approved changes feed: RSS · Atom

cpe:2.3:a:datafeedr:woocommerce_cloak_affiliate_links:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDatafeedr (d624e650-d163-590a-99a0-067463c9f81c)
ProductWoocommerce Cloak Affiliate Links (b2425767-248b-5e6c-8593-c02e76596c59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24647 vulnerable 2026-06-08 07:12:49.657149 WordPress WooCommerce Cloak Affiliate Links plugin <= 1.0.35 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in datafeedr WooCommerce Cloak Affiliate Links woocommerce-cloak-affiliate-links allows Cross Site Request Forgery.This issue affects WooCommerce Cloak Affiliate Links: from n/a through <= 1.0.35.
Published: 2025-01-24T17:24:41.931Z
Updated: 2026-04-28T16:11:31.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1308 vulnerable 2026-06-08 06:25:39.780468 WooCommerce Cloak Affiliate Links <= 1.0.33 - Missing Authorization to Unauthenticated Permalink Modification
HIGH (7.5)
The WooCommerce Cloak Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'permalink_settings_save' function in all versions up to, and including, 1.0.33. This makes it possible for unauthenticated attackers to modify the affiliate permalink base, driving traffic to malicious sites via the plugin's affiliate links.
Published: 2024-04-09T18:58:44.343Z
Updated: 2026-04-08T16:47:26.083Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.