Andrew Munro / AffiliateWP vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Andrew Munro / AffiliateWP products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-32520 Critical · 9.8 CWE-266 Mar 25, 2026

Andrew Munro AffiliateWP RewardsWP Plugin Privilege Escalation (CWE-266)

Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through <= 1.0.4.