Thirstyaffiliates Affiliate Link Manager Security Vulnerabilities and Issues — Thirstyaffiliates Affiliate Link Manager CVE List

Lucene search

CaseproofThirstyaffiliates Affiliate Link Manager

2 matches found

CVE•added 2022/04/25 4:16 p.m.•68 views

CVE-2022-0398

The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any authenticated user, such as subscriber to create arbitrary affiliate links, which could then be used to redirect users to an a...

5.4CVSS5.4AI score0.0007EPSS

Web

CVE•added 2021/03/18 3:15 p.m.•41 views

CVE-2021-24127

Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS), which could lead to privilege escalation.

5.4CVSS5.2AI score0.00332EPSS