affiliate-toolkit

toolkit <= 3.7.3 Cross Site Request Forgery (CSRF) Vulnerability <= 3.7.3

toolkit plugin <= 3.6.7 Reflected CrossSite Scripting vulnerability <= 3.6.7

toolkit plugin <= 3.6.5 Authenticated (Contributor+) Stored CrossSite Scripting via atkp_product Shortcode vulnerability <= 3.6.5

toolkit plugin <= 3.5.5 Unauthenticated Full Path Dislcosure vulnerability <= 3.5.5

toolkit plugin <= 3.4.4 Sensitive Data Exposure via Log File vulnerability <= 3.4.4