CVE-2025-13859 | AffiliateX Plugin up to 1.0.0/1.3.9.3 on WordPress Setting save_customization_settings cross site scripting

January 15, 2026 Yanac

A vulnerability was found in AffiliateX Plugin up to 1.0.0/1.3.9.3 on WordPress. It has been rated as problematic. The impacted element is the function save_customization_settings of the component Setting Handler. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2025-13859. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More