The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3. This is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' option is enabled. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazonsimpleadmin Plugin | — | Update amazonsimpleadmin plugin to version 1.5.4, or a newer patched version | May 15, 2025 | Sep 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub