VillaTheme AFFI – Affiliate Marketing for WooCommerce vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting VillaTheme AFFI – Affiliate Marketing for WooCommerce: 2 record(s), with affected versions and fixes.
CVE-2026-104398
Critical · 9.8
CWE-502 Oct 10, 2026
WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10.
CVE-2026-102390
Medium · 5.3
CWE-862 Oct 1, 2026
WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.9.