Input validation vulnerability in WC Affiliate – A Complete WooCommerce Affiliate Plugin 2.9

A plugin for WordPress called WC Affiliate has a security issue that could allow hackers to inject malicious code into a website. This vulnerability exists in versions up to 2.9 and can be exploited by attackers who have at least subscriber-level access. It is important to note that this vulnerability does not have a known way to fully take control of a website, but if the website has other plugins or themes with vulnerabilities, the attacker could potentially delete files, access sensitive information, or run code on the website.