CVE-2026-108291 - WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability
CVE ID :CVE-2026-108291 Published : Oct. 14, 2026, 1:17 p.m. | 15 minutes ago Description :Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1. Severity: 9.8 | CRITICAL Visit the...