Vendor
An unauthenticated SQL injection vulnerability in SliceWP Affiliates versions 1.2.14 and earlier allows remote attackers to extract sensitive database information via the email parameter during WooCommerce registration.