Plugin icon

ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

thirstyaffiliates

Vulnerabilities:

5

Last Updated:

January 20, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-02-02
Title
ThirstyAffiliates < 3.11.10 - Cross-Site Request Forgery
Fixed in
Fixed in 3.11.10
CVSS
4.3 (medium)
Published
2025-12-15
Title
ThirstyAffiliates < 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.11.9
CVSS
6.4 (medium)
Published
2022-03-31
Title
ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation
Fixed in
Fixed in 3.10.5
CVSS
3.5 (low)
Published
2022-03-31
Title
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
Fixed in
Fixed in 3.10.5
CVSS
3.1 (low)
Published
2020-05-22
Title
ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
Fixed in
Fixed in 3.9.3
CVSS
4.6 (medium)