Cross-site Scripting in Add & Replace Affiliate Links for Amazon by The Website Flip
CVE-2025-53285

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Add & Replace Affiliate Links For Amazon
Vendor
CVE Published:
27 June 2025

What is CVE-2025-53285?

The Add & Replace Affiliate Links for Amazon plugin by The Website Flip is susceptible to a stored cross-site scripting vulnerability. This allows attackers to inject malicious scripts that can be executed in the browser of users who view affected pages, potentially leading to unauthorized access and data theft. Users of versions up to 1.0.6 should take immediate action to secure their websites to prevent exploitation of this vulnerability.

Affected Version(s)

Add &amp; Replace Affiliate Links for Amazon <= 1.0.6

References

https://patchstack.com/database/wordpress/plugin/add-repl...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
.
CVE-2025-53285 : Cross-site Scripting in Add & Replace Affiliate Links for Amazon by The Website Flip