supercleanse vulnerabilities
7 published CVEs name supercleanse among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119089
ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag
supercleanse · ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
High7.2 - CVE-2026-5062
PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter
supercleanse · PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links
Medium4.9 - CVE-2026-12426
Members <= 3.2.22 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel
supercleanse · Members – Membership & User Role Editor Plugin
Medium5.3 - CVE-2026-1295
Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
supercleanse · Buy Now Plus — Payments with Stripe
Medium6.4 - CVE-2024-11008
Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
supercleanse · Members – Membership & User Role Editor Plugin
Medium5.3 - CVE-2024-2326
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update
supercleanse · PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin
Medium4.3 - CVE-2019-25147
Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link
supercleanse · PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin
High7.2