2kblater vulnerabilities

Products

• 2kb amazon affiliates store 2

Latest 2kblater CVEs

Newest publication first

1. CVE-2022-40968 WordPress 2kb Amazon Affiliates Store Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

   Published 2022-12-04

   Medium·CVSS 6.1 EPSS 0.43%

   Reflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affiliates Store plugin <=2.1.5 on WordPress.

2. CVE-2017-14622 2kb Amazon Affiliates Store < 2.1.1 - Reflected Cross-Site Scripting

   Published 2017-09-27

   Medium·CVSS 6.1 EPSS 2.9%

   Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.