5.4
Medium
CVE-2024-9838 The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL…
Description
The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Auto Affiliate Links 6.4 | earliest → < 6.4.7 | 6.4.7 |