CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-34386 – WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability
https://notcve.org/view.php?id=CVE-2024-34386
06 May 2024 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lucian Apostol Auto Affiliate Links.This issue affects Auto Affiliate Links: from n/a through 6.4.3.1. Neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL ("Inyección SQL") en Lucian Apostol Auto Affiliate Links. Este problema afecta a Auto Affiliate Links: desde n/a hasta 6.4.3.1. The Auto Affiliate Links plugin for WordPress is vulnerable to SQL Injection in a... • https://patchstack.com/database/vulnerability/wp-auto-affiliate-links/wordpress-auto-affiliate-links-plugin-6-4-3-1-sql-injection-vulnerability?_s_id=cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-45840 – WordPress Auto Affiliate Links plugin <= 6.2.1.5 - Unauth. Broken Access Control vulnerability
https://notcve.org/view.php?id=CVE-2022-45840
06 Feb 2023 — Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Affiliate Links: from n/a through 6.2.1.5. The Auto Affiliate Links plugin for WordPress is vulnerable to improper access control via multiple AJAX actions in versions up to, and including, 6.2.1.5. This allows authenticated attackers with subscriber-level permissions or above to modify plugin settings such as adding exclusions for posts a... • https://patchstack.com/database/wordpress/plugin/wp-auto-affiliate-links/vulnerability/wordpress-auto-affiliate-links-plugin-6-2-1-5-unauth-broken-access-control-vulnerability?_s_id=cve • CWE-284: Improper Access Control CWE-862: Missing Authorization •