7.1
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Description
Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Woocommerce Envato Affiliates: from n/a through 1.2.1.
This issue affects Woocommerce Envato Affiliates: from n/a through 1.2.1.
Basic Information
ID
CVE-2025-14361
Source
Patchstack
Published
May 26, 2026 at 20:58
Affected Product
Vendor
AA-Team
Product
Woocommerce Envato Affiliates
Version
n/a
Affected Versions
AA-Team Woocommerce Envato Affiliates n/a