Lucene search
Muhamad HidayatPATCHSTACK:A12F2BB500CE90B4E0C953BB15458947HistoryMar 31, 2022 - 12:00 a.m.
WordPress ThirstyAffiliates Affiliate Link Manager plugin <= 3.10.4 - Unauthorized Image Upload + CSRF vulnerabilities
2022-03-3100:00:00
Muhamad Hidayat
patchstack.com
13
wordpress
thirstyaffiliates
affiliate link manager
unauthorized image upload
csrf
vulnerabilities
muhamad hidayat
update
EPSS
0.001
Percentile
21.2%
Unauthorized Image Upload + CSRF vulnerabilities discovered by Muhamad Hidayat in WordPress ThirstyAffiliates Affiliate Link Manager plugin (versions <= 3.10.4).
Solution
Update the WordPress ThirstyAffiliates Affiliate Link Manager plugin to the latest available version (at least 3.10.5).
Related
cvelist
cvelist
nvd
nvd
CVE-2022-0634
2022-04-25 16:16:07
prion
prion
Cross site request forgery (csrf)
2022-04-25 16:16:00
wpvulndb
wpvulndb
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
2022-03-31 00:00:00
cnvd
cnvd
wpexploit
wpexploit
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
2022-03-31 00:00:00
cve
cve
CVE-2022-0634
2022-04-25 16:16:07