Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Auto Affiliate Links — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Auto Affiliate Links, with AI-generated Chinese analysis, references, and POCs.

Vendor: Lucian Apostol

CVE ID Title CVSS Severity Published
CVE-2026-24592 WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-05-25
CVE-2026-7330 Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter CWE-79 7.2 High 2026-05-08
CVE-2024-9838 Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection 7.2AI High AI 2025-05-15
CVE-2022-45840 WordPress Auto Affiliate Links plugin <= 6.2.1.5 - Unauth. Broken Access Control vulnerability CWE-862 6.5 Medium 2024-12-13
CVE-2024-34386 WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability CWE-89 7.6 High 2024-05-06
CVE-2024-1843 Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink CWE-862 4.3 Medium 2024-03-13
CVE-2023-47652 WordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 7.1 High 2023-11-13
CVE-2023-22689 WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control CWE-352 5.4 Medium 2023-05-20
CVE-2023-25973 WordPress Auto Affiliate Links Plugin <= 6.3.0.2 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium 2023-03-13

All 9 known CVE vulnerabilities affecting Auto Affiliate Links with full Chinese analysis, references, and POCs where available.