cleantalk
Vulnerabilities and Security Researches

Savyour Affiliate Partner, CVE-2025-48306

CVE, Research URL

CVE-2025-48306

Home page URL

Security reports for Savyour Affiliate Partner

Application

Savyour Affiliate Partner

Published on
Aug 28, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in developers savyour Savyour Affiliate Partner allows Stored XSS. This issue affects Savyour Affiliate Partner: from n/a through 2.1.4.
Affected versions
Min -, max 2.1.4.
Status
vulnerable
Previous vulnerability researches
Vibes (CVE-2025-9172) , Aug 27, 2025
Form Vibes – Database Manager for Forms (CVE-2024-5325) , Jul 12, 2024
Form Vibes – Database Manager for Forms (CVE-2024-5309) , Sep 05, 2024
Form Vibes – Database Manager for Forms (CVE-2022-4974) , Nov 15, 2024
Form Vibes – Database Manager for Forms (4a48804bae01b443ed063f4682c7359c9207a0ba) , Jun 07, 2024
New vulnerability
Add Code To Head (CVE-2025-48314) , Aug 29, 2025
130+ Widgets | Best Addons For Elementor – FREE (CVE-2025-58195) , Aug 29, 2025
WP Bulk Delete (CVE-2025-58192) , Aug 29, 2025
Responsive Mobile-Friendly Tooltip (CVE-2025-48316) , Aug 29, 2025
Savyour Affiliate Partner (CVE-2025-48306) , Aug 29, 2025