Now officially on WordPress.org

CVE Database / CVE-2024-8714

CVE · Medium

CVE-2024-8714 — Affiliate Program Suite — SliceWP Affiliates [slicewp] < 1.1.21

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-8714 Affiliate Program Suite — SliceWP Affiliates [slicewp] < 1.1.21 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 1.1.21 1.1.21 2024-09-12 —

CVE-2024-8714

The SliceWP Affiliates plugin for WordPress contains a security flaw that allows malicious actors to inject unauthorized code into website pages through a specific URL manipulation technique, known as Reflected Cross-Site Scripting. This vulnerability is present in all versions of the plugin up to and including 1.1.20. An attacker can exploit this issue by tricking a user into clicking on a link that executes malicious scripts.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings