Medium · 6.5 CVE-2022-45840 EUVD-2022-48694GHSA-36xf-458c-932h

WordPress Auto Affiliate Links plugin <= 6.2.1.5 - Unauth. Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Lucian Apostol Product: Auto Affiliate Links

Description

Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Affiliate Links: from n/a through 6.2.1.5.

Affected products

Vendor	Product	Affected	Fixed
Lucian Apostol	Auto Affiliate Links	≤ 6.2.1.5	—

References

https://patchstack.com/database/wordpress/plugin/wp-auto-affiliate-links/vulnerability/wordpress-auto-affiliate-links-plugin-6-2-1-5-unauth-broken-access-control-vulnerability?_s_id=cve vdb-entry