cleantalk
Vulnerabilities and Security Researches

WpZon – Amazon Affiliate Plugin, CVE-2025-46506

CVE, Research URL

CVE-2025-46506

Published on
Apr 24, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Lora77 WpZon – Amazon Affiliate Plugin allows Reflected XSS. This issue affects WpZon – Amazon Affiliate Plugin: from n/a through 1.3.
Affected versions
Min -, max 1.3.
Status
vulnerable