CPE

Cpe:2.3:a:ecommerce_affiliate_project:ecommerce_affiliate:::*:::wordpress::

1 brief RSS

Ecommerce Affiliate: Unauthenticated account takeover via OTP vulnerability (CVE-2026-106015)

The Ecommerce Affiliate plugin for WordPress versions 1.0.0 and below contains a flaw in the OTP authentication flow that allows unauthenticated attackers to perform account takeovers by bypassing verification restrictions.

Ecommerce Affiliate wordpress authentication-bypass cve-2026-106015

1t 1c 8h ago

Cpe:2.3:a:ecommerce_affiliate_project:ecommerce_affiliate:*:*:*:*:*:wordpress:*:*

Ecommerce Affiliate: Unauthenticated account takeover via OTP vulnerability (CVE-2026-106015)

Cpe:2.3:a:ecommerce_affiliate_project:ecommerce_affiliate:::*:::wordpress::