5 matches found
CVE-2023-47652
CVE-2023-47652 affects the WordPress plugin Auto Affiliate Links (
CVE-2023-22689
CVE-2023-22689 affects the WordPress plugin “Auto Affiliate Links” and is triggered by a Cross-Site Request Forgery (CSRF) vulnerability in versions
CVE-2024-1843
CVE-2024-1843 (Auto Affiliate Links, WordPress) is a publicly known vulnerability in the WP Auto Affiliate Links plugin (affected versions up to 6.4.3) where a missing capability check in aalAddLink allows authenticated users with subscriber access or higher to modify data by adding arbitrary lin...
CVE-2023-25973
CVE-2023-25973 is a CSRF vulnerability in the WordPress plugin Lucian Apostol Auto Affiliate Links, affecting versions
CVE-2024-9838
The Auto Affiliate Links WordPress plugin (versions prior to 6.4.7 ) is vulnerable to an SQL injection attack. The root cause is the failure to sanitize and escape a parameter before utilizing it in a SQL statement. This security flaw allows users with administrator privileges to execute arbitrar...