Medium severity6.1NVD Advisory· Published Mar 28, 2022· Updated Jun 17, 2026
CVE-2022-0818
CVE-2022-0818
Description
The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <4.16.4.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/c43fabb4-b388-462c-adc4-c6b25af7043bnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.