Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Lucian Apostol Clear all filters
TI-2024-09130 CVE-2024-9838 · GHSA-28cc-3w24-mfvx

Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection

Priority MEDIUM 60

The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0034 Published 2025-05-15 Fixed in 6.4.7 CWE-89
TI-2024-22726 CVE-2024-34386 · GHSA-4vmc-32f5-wrhg

WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lucian Apostol Auto Affiliate Links.This issue affects Auto Affiliate Links: from n/a through 6.4.3.1.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00515 Published 2024-05-06 No fix listed CWE-89
TI-2024-01715 CVE-2024-1843 · GHSA-724m-f653-3f8m

Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink

Priority LOW 21

The Auto Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aalAddLink function in all versions up to, and including, 6.4.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00533 Published 2024-03-13 No fix listed CWE-862