← Database

CVE-2026-32520

CRITICAL CVSS: 9.8 Published: 2026-03-25 Modified: 2026-06-17

Description

Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through <= 1.0.4.

Affected Platforms

Unknown

Weakness Type

CWE-266

References