WordPress plugin
WooCommerce Amazon Affiliates - Wordpress Plugin security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High2
- Medium5
- Low0
All WooCommerce Amazon Affiliates - Wordpress Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) Arbitrary File Deletion ≤14.0.31No patch available | CVE-2026-27040 | |
| Medium6.5 | Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) SQL Injection ≤14.0.31No patch available | CVE-2026-27039 | |
| Medium4.3 | Missing Authorization ≤14.0.31No patch available | CVE-2026-25473 | |
| Medium5.3 | Wordpress Plugin < 14.1.00 - Missing Authorization <14.1.00Update to 14.1.00 | CVE-2024-33545 | |
| Medium4.3 | Missing Authorization <14.1.00Update to 14.1.00 | CVE-2024-33547 | |
| Medium6.1 | Wordpress Plugin < 14.1.00 - Reflected Cross-Site Scripting <14.1.00Update to 14.1.00 | CVE-2024-33548 | |
| Critical10.0 | Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection ≤14.0.10Update to 14.0.31 | CVE-2024-33544 | |
| Critical9.9 | Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection ≤14.0.10No patch available | CVE-2024-33546 | |
| High8.8 | Wordpress Plugin < 14.1.00 - Authenticated (Subscriber+) Privilege Escalation <14.1.00Update to 14.1.00 | CVE-2024-33549 |
- High8.1Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) Arbitrary File Deletion
≤14.0.31No patch available
- Medium6.5Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) SQL Injection
≤14.0.31No patch available
- Medium4.3Missing Authorization
≤14.0.31No patch available
- Medium5.3Wordpress Plugin < 14.1.00 - Missing Authorization
<14.1.00Update to 14.1.00
- Medium4.3Missing Authorization
<14.1.00Update to 14.1.00
- Medium6.1Wordpress Plugin < 14.1.00 - Reflected Cross-Site Scripting
<14.1.00Update to 14.1.00
- Critical10.0Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection
≤14.0.10Update to 14.0.31
- Critical9.9Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection
≤14.0.10No patch available
- High8.8Wordpress Plugin < 14.1.00 - Authenticated (Subscriber+) Privilege Escalation
<14.1.00Update to 14.1.00
WooCommerce Amazon Affiliates - Wordpress Plugin: common questions
Does WooCommerce Amazon Affiliates - Wordpress Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in WooCommerce Amazon Affiliates - Wordpress Plugin: 2 critical, 2 high, 5 medium. At least one is not fixed in the latest version.
How do I check which version of WooCommerce Amazon Affiliates - Wordpress Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WooCommerce Amazon Affiliates - Wordpress Plugin vulnerability?
CVE-2026-27040, published Mar 16, 2026: WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) Arbitrary File Deletion. Severity: High (CVSS 8.1).
Is any WooCommerce Amazon Affiliates - Wordpress Plugin vulnerability listed in CISA KEV?
No. None of the known WooCommerce Amazon Affiliates - Wordpress Plugin vulnerabilities is currently listed in the CISA KEV catalog.