Auto Affiliate Links

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Auto Affiliate Links

Information

Software Type Plugin
Software Slug wp-auto-affiliate-links (view on wordpress.org)
Software Status Active
Software Author thedark
Software Website autoaffiliatelinks.com
Software Downloads 997,969
Software Active Installs 3,000
Software Record Last Updated August 10, 2026

12 Vulnerabilities

Submit a Vulnerability
Auto Affiliate Links <= 6.8.8.3 - Missing Authorization
5.3
CVE-2026-24592
May 25, 2026
Researcher: Nabil Irawan
Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter
7.2
CVE-2026-7330
May 7, 2026
Researcher: DJumanto
Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection
4.9
CVE-2024-9838
Sep 18, 2024
Researcher: y4ng0615
Auto Affiliate Links <= 6.4.3.1 - Authenticated (Editor+) SQL Injection
9.1
CVE-2024-34386
May 6, 2024
Researcher: Do Truong Giang
Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink
4.3
CVE-2024-1843
Mar 11, 2024
Researcher: Lucio Sá
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery
5.8
CVE ID Unknown
Jan 9, 2024
Researchers:
Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery
4.3
CVE ID Unknown
Nov 20, 2023
Researchers:
Auto Affiliate Links <= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2023-47652
Nov 7, 2023
Researcher: LEE SE HYOUNG
Auto Affiliate Links <= 6.3.0.2 - Cross-Site Request Forgery via aalChangeOptions function
4.3
CVE-2023-25973
Feb 22, 2023
Researcher: Rio Darmawan
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change
5.4
CVE-2022-45840
Feb 6, 2023
Researcher: Nguyen Anh Tien
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function
4.3
CVE-2023-22689
Feb 2, 2023
Researcher: Justiice
Auto Affiliate Links < 5.0 - SQL Injection
9.8
CVE ID Unknown
Jul 15, 2015
Researcher: Marcin Probola
Title Status CVE ID CVSS Researchers Date
Auto Affiliate Links <= 6.8.8.3 - Missing Authorization Patched CVE-2026-24592 5.3 Nabil Irawan May 25, 2026
Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter Patched CVE-2026-7330 7.2 DJumanto May 7, 2026
Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection Patched CVE-2024-9838 4.9 y4ng0615 September 18, 2024
Auto Affiliate Links <= 6.4.3.1 - Authenticated (Editor+) SQL Injection Patched CVE-2024-34386 9.1 Do Truong Giang May 6, 2024
Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink Patched CVE-2024-1843 4.3 Lucio Sá March 11, 2024
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery Patched 5.8 January 9, 2024
Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery Patched 4.3 November 20, 2023
Auto Affiliate Links <= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting Patched CVE-2023-47652 6.1 LEE SE HYOUNG November 7, 2023
Auto Affiliate Links <= 6.3.0.2 - Cross-Site Request Forgery via aalChangeOptions function Patched CVE-2023-25973 4.3 Rio Darmawan February 22, 2023
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change Patched CVE-2022-45840 5.4 Nguyen Anh Tien February 6, 2023
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function Patched CVE-2023-22689 4.3 Justiice February 2, 2023
Auto Affiliate Links < 5.0 - SQL Injection Patched 9.8 Marcin Probola July 15, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation