What’s Vulnerable › Products

Lucian Apostol Auto Affiliate Links vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Lucian Apostol Auto Affiliate Links version is affected

Latest Lucian Apostol Auto Affiliate Links vulnerabilities

• CVE-2026-24592 — WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-7330 — Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter (CVSS 7.2)
• CVE-2024-9838 — Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection (CVSS 5.4)
• CVE-2022-45840 — WordPress Auto Affiliate Links plugin <= 6.2.1.5 - Unauth. Broken Access Control vulnerability (CVSS 6.5)
• CVE-2024-34386 — WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2024-1843 — Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink (CVSS 4.3)
• CVE-2023-47652 — WordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.1)
• CVE-2023-22689 — WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control (CVSS 8.8)
• CVE-2023-25973 — WordPress Auto Affiliate Links Plugin <= 6.3.0.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)