https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:59:41.741804+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-5285 CVE-2024-5285 — WP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRF 2026-10-08T01:59:41.756935+00:00

Affected: Unknown wp-affiliate-platform, slicewp wp-affiliate-platform

The wp-affiliate-platform WordPress plugin before 6.5.2 does not have CSRF check in place when deleting affiliates, which could allow attackers to make a logged in user change delete them via a CSRF attack