Medium · 5.3 CVE-2026-24592 EUVD-2026-31748GHSA-64j4-wv48-vxg4

WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Auto Affiliate Links: from n/a through 6.8.8.3.

Vendor	Product	Affected	Fixed
Lucian Apostol	Auto Affiliate Links	≤ 6.8.8.3	—