Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-24592

WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability

Description

Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affiliate Links: from n/a through 6.8.8.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lucian Apostol Auto Affiliate Links

Default version status: unaffected

  • n/a to ≤ 6.8.8.3affected

References