What’s Vulnerable › Products

ThirstyAffiliates vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ThirstyAffiliates version is affected

Latest ThirstyAffiliates vulnerabilities

• CVE-2026-97314 — ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection (CVSS 6.5)
• CVE-2022-0634 — ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF (CVSS 4.3)
• CVE-2022-0398 — ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation (CVSS 5.4)
• CVE-2021-24127 — ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS (CVSS 5.4)