Aller au contenu
Se connecter
6.5 Moyenne

CVE-2026-97314 The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its…

Description

The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics.

Produits et versions touchés

Produit Versions touchées Corrigé en
ThirstyAffiliates 3.12 premières → < 3.12.1 3.12.1

Autres CVE de ThirstyAffiliates

Les 3 CVE de ThirstyAffiliates →
CVE-2022-0634 The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image… Non notée CVE-2021-24127 Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions… Non notée
Suivre cette CVE