WordPress plugin ThirstyAffiliates Affiliate Link Manager licensing issue vulnerability (CNVD-2023-06534)

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin ThirstyAffiliates Affiliate Link Manager 3.10.5 previously had a security vulnerability that stemmed from the plugin’s lack of authorization checks in the ta_ insert_external_image operation, a low privilege attacker could exploit the vulnerability to add an image from an external URL to an affiliate link.