Auto Affiliate Links Security Vulnerabilities and Issues — Auto Affiliate Links CVE List

FlamescorpionAuto Affiliate Links

5 matches found

CVE•added 2023/11/13 3:52 a.m.•94 views

CVE-2023-47652

CVE-2023-47652 affects the WordPress plugin Auto Affiliate Links (

7.1CVSS7AI score0.00208EPSS

CVE•added 2023/05/20 10:41 p.m.•59 views

CVE-2023-22689

CVE-2023-22689 affects the WordPress plugin “Auto Affiliate Links” and is triggered by a Cross-Site Request Forgery (CSRF) vulnerability in versions

8.8CVSS7.2AI score0.00257EPSS

CVE•added 2024/03/13 3:26 p.m.•54 views

CVE-2024-1843

CVE-2024-1843 (Auto Affiliate Links, WordPress) is a publicly known vulnerability in the WP Auto Affiliate Links plugin (affected versions up to 6.4.3) where a missing capability check in aalAddLink allows authenticated users with subscriber access or higher to modify data by adding arbitrary lin...

4.3CVSS5.3AI score0.00533EPSS

CVE•added 2023/03/13 2:14 p.m.•46 views

CVE-2023-25973

CVE-2023-25973 is a CSRF vulnerability in the WordPress plugin Lucian Apostol Auto Affiliate Links, affecting versions

8.8CVSS7.1AI score0.00248EPSS

CVE•added 2025/05/15 8:7 p.m.•31 views

CVE-2024-9838

The CVE pertains to the WordPress plugin Auto Affiliate Links, affected versions prior to 6.4.7. The underlying issue is insufficient sanitization/escaping of a parameter before its use in a SQL statement, enabling admin users to perform SQL injection. Reported remediation is to upgrade to versio...

5.4CVSS7.6AI score0.00271EPSS