Read the docs

Lucian Apostol

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Lucian Apostol records in CISA KEV

No Lucian Apostol vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Auto Affiliate Links 5 records MEDIUM

Records

8 records

TI-2024-09130 CVE-2024-9838 · GHSA-28cc-3w24-mfvx

Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection

Priority MEDIUM 60

The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0034 Published 2025-05-15 Fixed in 6.4.7 CWE-89
TI-2024-22726 CVE-2024-34386 · GHSA-4vmc-32f5-wrhg

WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lucian Apostol Auto Affiliate Links.This issue affects Auto Affiliate Links: from n/a through 6.4.3.1.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00515 Published 2024-05-06 No fix listed CWE-89
TI-2024-01715 CVE-2024-1843 · GHSA-724m-f653-3f8m

Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink

Priority LOW 21

The Auto Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aalAddLink function in all versions up to, and including, 6.4.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00533 Published 2024-03-13 No fix listed CWE-862
Open these records in search →