The Skimlinks Affiliate Marketing Tool plugin for WordPress has a security issue called Server-Side Request Forgery. It affects all versions up to 1.3. This means that hackers who are logged in as an Administrator or higher can make requests to different websites through the plugin, which can be used to get and change information from other parts of the website.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
