VYPR

Affiliate Pro

by Redefiningtheweb

CVEs (1)

  • CVE-2024-9289CriOct 1, 2024
    risk 0.64cvss 9.8epss 0.01

    The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1. This is due to the rtwwwap_login_request_callback() function not properly validating a user's identity prior to authenticating…