Medium
CVE-2026-24592
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filters
High
CVE-2026-7330
Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter
Medium
CVE-2024-9838
Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-34386
Auto Affiliate Links <= 6.4.3.1 - Authenticated (Editor+) SQL Injection
Medium
CVE-2024-1843
Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink
Medium
d89918e1-b525-4d32-9b11-5e014eb02c16
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery
Medium
17453fa5-af14-477b-9b3d-b245511ad8ce
Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery
Medium
CVE-2023-47652
Auto Affiliate Links <= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-25973
Auto Affiliate Links <= 6.3.0.2 - Cross-Site Request Forgery via aalChangeOptions function
Medium
CVE-2022-45840
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change
Medium
CVE-2023-22689
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function
Critical
438d73bb-80f1-460f-8c62-2a40856e4c29
Auto Affiliate Links < 5.0 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.