cleantalk
Vulnerabilities and Security Researches

WooCommerce Affiliate Plugin – Coupon Affiliates, CVE-2025-54025

CVE, Research URL

CVE-2025-54025

Published on
Aug 20, 2025
Research Description
Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Coupon Affiliates: from n/a through 6.4.0.
Affected versions
max 6.4.2.
Status
vulnerable