Vulnerabilities / FluentAffiliate
FluentAffiliate vulnerabilities
Advisories WPSec published for FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager. Other sources may list more. Its attack surface: FluentAffiliate on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-30 | WPSEC-2026-2057 | FluentAffiliate <= 1.6.5 - Authenticated (Subscriber+) Missing Authorization to Affiliate Registration via 'fluent_affiliate_user_registration' AJAX Action | Medium 4.3 | 1.7.0 |
| 2026-10-30 | WPSEC-2026-2056 | FluentAffiliate <= 1.6.5 - Unauthenticated Affiliate Profile Creation for Arbitrary Users via Paymattic Affiliate Registration Integration | Medium 5.3 | 1.7.0 |
License: CC BY 4.0