PT-2022-13154 · WordPress · Thirstyaffiliates Affiliate Link Manager

Name of the Vulnerable Software and Affected Versions: ThirstyAffiliates Affiliate Link Manager WordPress plugin versions prior to 3.10.5 Description: The issue is related to the lack of authorisation and CSRF checks when creating affiliate links. This could allow any authenticated user, such as ...