CVE-2026-73355

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.

We have discovered 2,643 live websites that are affected by CVE-2026-73355.

Run a Free Instant Scan



Affected Software

Product  Affiliates Manager
Category Wordpress Plugins
Vulnerable Domains2,643 live websites (100% of Affiliates Manager install base)
Vulnerable Versions
  • from 0 through 2.9.53
Vulnerable Versions Count94 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')



Details

  • Published - Aug 18, 2026
  • Updated - Aug 18, 2026

Credits

  • 20kilograma | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-73355
United States1,091 websites


Germany297 websites
GB143 websites
France128 websites
Spain81 websites
Cyprus60 websites
Netherlands60 websites
Italy59 websites
Canada58 websites
Australia52 websites

Website Distribution by TLD

Number of websites using CVE-2026-73355
.com1,586 websites
.de142 websites
.net65 websites
.co.uk57 websites
.nl50 websites
.org48 websites
.fr47 websites
.it41 websites
.com.br40 websites
.pl39 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-73355

Top websites that are affected by CVE-2026-73355. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***********.eu Cyprus*,***
*************.com United States*,***
*********.com United States**,***
****************.org France**,***
**********.com United States**,***
*************.net United States**,***
***************.com United States**,***
**************.com GB**,***
****.**.uk United States**,***
**************.de Germany***,***
See full domain list

FAQ

CVE-2026-73355 is Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Affiliates Manager
A total of 2,643 websites have been identified as vulnerable to CVE-2026-73355, based on global website indexing conducted by WebTechSurvey.
The Affiliates Manager is affected by the CVE-2026-73355 vulnerability.
Affiliates Manager versions up to and including 2.9.53 are vulnerable to CVE-2026-73355.