Villatheme Affi – Affiliate Marketing For Woocommerce vulnerabilities

2 CVEs affecting Villatheme Affi – Affiliate Marketing For Woocommerce, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-104398, published 2026-10-10.

More from Villatheme.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-104398, published 2026-10-10. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate…
• CVE-2026-102390, published 2026-10-01. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Exploiting Incorrectly Configured Access Control Security…