cleantalk
Vulnerabilities and Security Researches

WC Affiliate – A Full-fledged Affiliate Manager for WooCommerce, CVE-2025-47660

CVE, Research URL

CVE-2025-47660

Published on
May 23, 2025
Research Description
Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate allows Object Injection. This issue affects WC Affiliate: from n/a through 2.9.1.
Affected versions
Min -, max 2.9.
Status
vulnerable