supercleanse vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20264

Newest CVEs

• CVE-2026-119089

  ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag

  supercleanse · ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

  High7.2
• CVE-2026-5062

  PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  supercleanse · PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links

  Medium4.9
• CVE-2026-12426

  Members <= 3.2.22 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel

  supercleanse · Members – Membership & User Role Editor Plugin

  Medium5.3
• CVE-2026-1295

  Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  supercleanse · Buy Now Plus — Payments with Stripe

  Medium6.4
• CVE-2024-11008

  Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

  supercleanse · Members – Membership & User Role Editor Plugin

  Medium5.3
• CVE-2024-2326

  Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update

  supercleanse · PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin

  Medium4.3
• CVE-2019-25147

  Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

  supercleanse · PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin

  High7.2