CRITICAL
9.8 CVE-2026-108291 Published 14 Oct 2026
itthinx Affiliates Plugin Deserialization Object Injection Vulnerability
Worried this affects your website?
A deserialization of untrusted data vulnerability has been found in the itthinx Affiliates plugin, allowing object injection.
This issue affects Affiliates versions:
- from n/a through 7.0.1
Reference: CVE-2026-108291 on NVD
← Back to Security News