WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control
CVE-2023-22689
8.8HIGH
What is CVE-2023-22689?
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Auto Affiliate Links plugin by Lucian Apostol, affecting versions up to 6.3. This flaw can allow attackers to execute unauthorized actions on behalf of authenticated users, potentially compromising site functionality and user data. Website administrators are urged to update to the latest version or implement mitigations to protect against automated exploits leveraging this vulnerability.
Affected Version(s)
Auto Affiliate Links <= 6.3