VendorsFlame Scorpionauto_affiliate_linksany version
Vulnerabilities

Flame Scorpion Auto Affiliate Links any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2023-22689
WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control
Published 2023-05-20 · Modified
8.8EPSS 0.003
CVE-2023-25973
WordPress Auto Affiliate Links Plugin <= 6.3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-03-13 · Modified
8.8EPSS 0.002
CVE-2023-47652
WordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-11-13 · Modified
7.1EPSS 0.002
CVE-2024-9838
Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection
Published 2025-05-15 · Analyzed
5.4EPSS 0.003
CVE-2024-1843
Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink
Published 2024-03-13 · Modified
4.3EPSS 0.005