WordPress plugin
Overstock Affiliate Links security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Overstock Affiliate Links vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] ≤1.1No patch available | CVE-2025-13624 |
- Medium6.1Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
≤1.1No patch available
Overstock Affiliate Links: common questions
Does Overstock Affiliate Links have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Overstock Affiliate Links: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Overstock Affiliate Links I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Overstock Affiliate Links vulnerability?
CVE-2025-13624, published Dec 19, 2025: Overstock Affiliate Links <= 1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']. Severity: Medium (CVSS 6.1).
Is any Overstock Affiliate Links vulnerability listed in CISA KEV?
No. None of the known Overstock Affiliate Links vulnerabilities is currently listed in the CISA KEV catalog.