Vulnerabilidades de Iovamihai

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Iovamihai: 2 registro(s), com severidade, exploração e correções.

SliceWP 1 Affiliate Program Suite — SliceWP Affiliates 1

Somente exploradas (KEV) →

CVE-2026-42653 Alta · 7.1 CWE-79 11/06/2026

WordPress SliceWP plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.Mihai SliceWP allows Stored XSS. This issue affects SliceWP: from n/a through 1.2.6.

CVE-2026-6672 Média · 6.4 CWE-79 06/05/2026

Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode

The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1.2.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes in the 'slicewp_affiliate_url' shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.