CVE-2022-0398

ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation

published April 25, 2022

CVSS
—
EPSS
0%
Percentile
22.9
In the wild
Unconfirmed
What it is

The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any authenticated user, such as subscriber to create arbitrary affiliate links, which could then be used to redirect users to an arbitrary website

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00313 · 22.9th percentile
Published
2022-04-25T15:50Z
EPSS history
Timeline
  • 25 APR 15:50Z
    ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation
    cvelistv5