CVE-2026-104398
CRITICAL NVDCVSS Score
9.8
Severity
CRITICAL
Source
NVD
Published
Oct 10, 2026
Description
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI โ Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI โ Affiliate Marketing for WooCommerce: from n/a through 1.0.10.