Input validation vulnerability in Affiliates Manager 2.9.31

The Affiliates Manager plugin for WordPress is vulnerable to malicious attacks. This means that unauthenticated attackers may be able to manipulate certain aspects of the plugin. This includes approving, declining, or blocking affiliate applications, as well as managing the status of affiliates. To do this, the attackers would need to trick a site administrator into clicking on a link. Versions up to and including 2.9.31 of the plugin are affected. This is because the plugin does not always properly validate nonces which are used to help protect against malicious attacks.