Skip to content
Threat Feed
Subscribe

Product

Affiliate-Toolkit – Multi-Network Affiliate & Amazon Product Display (<= 3.9.2)

1 brief RSS
high advisory

affiliate-toolkit: Stored Cross-Site Scripting via atkp_product_producturl (CVE-2026-111314)

The affiliate-toolkit WordPress plugin contains a stored XSS vulnerability in the atkp_product_producturl parameter, allowing unauthenticated or contributor-level attackers to inject arbitrary web scripts.

affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display xss wordpress plugin
2t 1c