PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-52692 wp.insider CVE debrief

CVE-2026-52692 is a HIGH severity vulnerability (CVSS Score: 7.5) in the Affiliates Manager plugin versions <= 2.9.50. The vulnerability allows unauthenticated sensitive data exposure. The CVE was published on 2026-06-15T21:17:23.853Z and last modified on 2026-06-15T21:24:32.790Z.

Vendor
wp.insider
Product
Affiliates Manager
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-15
Original CVE updated
2026-06-15
Advisory published
2026-06-15
Advisory updated
2026-06-15

Who should care

Users of Affiliates Manager plugin versions <= 2.9.50 should be aware of this vulnerability and take necessary actions to mitigate it.

Technical summary

The vulnerability has a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N and is classified under CWE-201.

Defensive priority

HIGH

Recommended defensive actions

  • Update Affiliates Manager plugin to a version greater than 2.9.50.
  • Refer to [ref-4](https://patchstack.com/database/wordpress/plugin/affiliates-manager/vulnerability/wordpress-affiliates-manager-plugin-2-9-50-sensitive-data-exposure-vulnerability?_s_id=cve) for mitigation or vendor's [

Evidence notes

The vendor and product information is currently unknown and marked for review.

Official resources

CVE-2026-52692 was published on 2026-06-15T21:17:23.853Z and last modified on 2026-06-15T21:24:32.790Z.