Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

cservit vulnerabilities

10 published CVEs name cservit among the affected products.

Published CVEs
10
Last 12 months
5
Critical
0
Known exploited
0

Critical 0High 3Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20245
  2. 20265

Newest CVEs

  • CVE-2026-111255

    affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    High7.5
  • CVE-2026-111314

    affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parameter

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    High7.2
  • CVE-2026-12743

    affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    Medium4.9
  • CVE-2026-15296

    affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    Medium6.4
  • CVE-2026-6169

    affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    High7.2
  • CVE-2024-10675

    affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    Medium6.1
  • CVE-2024-10227

    affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    Medium6.4
  • CVE-2024-6562

    affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    Medium5.3
  • CVE-2024-1851

    affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    Medium6.3
  • CVE-2024-2298

    affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product

    cservit · affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    Medium4.3