Getaawp

getaawp

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Amazon Affiliate Wordpress Plugin

amazon_affiliate_wordpress_plugin

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-6956 1Getaawp 1Amazon Affiliates Jun 17, 2026 Jun 6, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The EasyAzon – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘easyazon-cloaking-locale’ parameter in all versions up to, and including, 5.1.0 due to insuf...Show more The EasyAzon – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘easyazon-cloaking-locale’ parameter in all versions up to, and including, 5.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.Show less
CVE-2022-4794 1Getaawp 1Amazon Affiliate Wordpress Plugin Jun 17, 2026 Jan 30, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-6956

1Getaawp

1Amazon Affiliates

Jun 17, 2026

Jun 6, 2024

N/A· v4

6.1 MEDIUM· v3

N/A· v2

The EasyAzon – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘easyazon-cloaking-locale’ parameter in all versions up to, and including, 5.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.Show less

CVE-2022-4794

1Getaawp

1Amazon Affiliate Wordpress Plugin

Jun 17, 2026

Jan 30, 2023

N/A· v4

7.5 HIGH· v3

N/A· v2

The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.