High severity8.0NVD Advisory· Published Sep 16, 2022· Updated Jun 17, 2026

CVE-2022-2798

Description

The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection attacks against an admin exporting the data

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Affiliate Links Managercpe-rescue
Package: https://wordpress.org/plugins/affiliate-links-manager
WordPress/Affiliates Managerllm-fuzzy
Range: <2.9.14
Package: https://wordpress.org/plugins/affiliates-manager

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/f169567d-c682-4abe-94df-a9d00be90eddnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000