Auto Affiliate Links

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Auto Affiliate Links

Information

Software Type Plugin
Software Slug wp-auto-affiliate-links (view on wordpress.org)
Software Status Active
Software Author thedark
Software Website autoaffiliatelinks.com
Software Downloads 817,954
Software Active Installs 4,000
Software Record Last Updated April 26, 2024

8 Vulnerabilities

Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink
4.3
CVE-2024-1843
Mar 11, 2024
Researcher: Lucio Sá
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery
5.8
CVE ID Unknown
Jan 9, 2024
Researchers:
Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery
4.3
CVE ID Unknown
Nov 20, 2023
Researchers:
Auto Affiliate Links <= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2023-47652
Nov 7, 2023
Researcher: LEE SE HYOUNG
Auto Affiliate Links <= 6.3.0.2 - Cross-Site Request Forgery via aalChangeOptions function
4.3
CVE-2023-25973
Feb 22, 2023
Researcher: Rio Darmawan
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change
5.4
CVE-2022-45840
Feb 6, 2023
Researcher: Nguyen Anh Tien
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function
4.3
CVE-2023-22689
Feb 2, 2023
Researcher: Justiice
Auto Affiliate Links < 5.0 - SQL Injection
9.8
CVE ID Unknown
Jul 15, 2015
Researcher: Marcin Probola
Title CVE ID CVSS Researchers Date
Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink CVE-2024-1843 4.3 Lucio Sá March 11, 2024
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery 5.8 January 9, 2024
Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery 4.3 November 20, 2023
Auto Affiliate Links <= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2023-47652 6.1 LEE SE HYOUNG November 7, 2023
Auto Affiliate Links <= 6.3.0.2 - Cross-Site Request Forgery via aalChangeOptions function CVE-2023-25973 4.3 Rio Darmawan February 22, 2023
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change CVE-2022-45840 5.4 Nguyen Anh Tien February 6, 2023
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function CVE-2023-22689 4.3 Justiice February 2, 2023
Auto Affiliate Links < 5.0 - SQL Injection 9.8 Marcin Probola July 15, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation