CVE-2023-47652highCWE-352

CVE-2023-47652: falha de alta gravidade em Lucian Apostol Auto Affiliate Links

WordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Auto Affiliate Links

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links allows Stored XSS.This issue affects Auto Affiliate Links: from n/a through 6.4.2.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Lucian Apostol · Auto Affiliate Links
CVEs relacionadas — Lucian Apostol Auto Affiliate Links

No mesmo produto, das mais perigosas para as menos.

CVE-2022-45840MEDIUMWordPress Auto Affiliate Links plugin <= 6.2.1.5 - Unauth. Broken Access Control vulnerabilityEPSS 0.7%CVE-2024-34386HIGHWordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerabilityEPSS 0.5%CVE-2023-22689MEDIUMWordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access ControlEPSS 0.3%CVE-2023-25973MEDIUMWordPress Auto Affiliate Links Plugin <= 6.3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-24592MEDIUMWordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerabilityEPSS 0.2%