Caseproof Thirstyaffiliates Affiliate Link Manager
3 CVEs affecting Caseproof Thirstyaffiliates Affiliate Link Manager. Latest disclosed: 2022-04-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0398 | Medium | 5.4 | 2022-04-25 | The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which co… |
CVE-2021-24127 | Medium | 5.4 | 2021-03-18 | Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authen… |
CVE-2022-0634 | Medium | 4.3 | 2022-04-25 | The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a r… |