CVE-2026-32558

An unauthenticated privilege escalation vulnerability exists in the Affiliate Pro plugin for WordPress, affecting versions up to 8.9.1. This critical flaw allows attackers to gain elevated privileges without authentication, potentially leading to unauthorized access and control over the affected WordPress sites. WordPress site administrators using this plugin should prioritize immediate updates to mitigate the risk of exploitation.