Plugin icon

Auto Affiliate Links

wp-auto-affiliate-links

Vulnerabilities:

10

Last Updated:

July 21, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-05-25
Title
Auto Affiliate Links < 6.8.9 - Missing Authorization
Fixed in
Fixed in 6.8.9
CVSS
5.3 (medium)
Published
2026-05-07
Title
Auto Affiliate Links < 6.8.8.1 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter
Fixed in
Fixed in 6.8.8.1
CVSS
7.2 (high)
Published
2024-09-18
Title
Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection
Fixed in
Fixed in 6.4.7
CVSS
6.8 (medium)
Published
2024-05-06
Title
Auto Affiliate Links < 6.4.4 - Authenticated (Editor+) SQL Injection
Fixed in
Fixed in 6.4.4
CVSS
9.1 (critical)
Published
2024-03-11
Title
Auto Affiliate Links < 6.4.3.1 - Missing Authorization via aalAddLink
Fixed in
Fixed in 6.4.3.1
CVSS
4.3 (medium)
Published
2024-01-09
Title
Auto Affiliate Links < 6.4.2.8 - Cross-Site Request Forgery
Fixed in
Fixed in 6.4.2.8
CVSS
5.8 (medium)
Published
2023-11-20
Title
Auto Affiliate Links < 6.4.2.6 - Cross-Site Request Forgery
Fixed in
Fixed in 6.4.2.6
CVSS
4.3 (medium)
Published
2023-11-07
Title
Auto Affiliate Links < 6.4.2.5 - Settings Update to Stored XSS via CSRF
Fixed in
Fixed in 6.4.2.5
CVSS
7.1 (high)
Published
2023-02-22
Title
Auto Affiliate Links < 6.3.0.3 - Settings Update via CSRF
Fixed in
Fixed in 6.3.0.3
CVSS
4.3 (medium)
Published
2015-07-15
Title
Auto Affiliate Links < 5.0 - Authenticated Blind SQL Injection
Fixed in
Fixed in 5.0
CVSS
n/a