CVE Database /
CVE-2024-34386
CVE · High
CVE-2024-34386 — Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-34386
|
Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.4 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
7.6
|
< 6.4.4
|
6.4.4 |
2024-05-06 |
—
|
CVE-2024-34386
The Auto Affiliate Links plugin for WordPress through version 6.4.3.1 contains a SQL injection vulnerability stemming from inadequate sanitization of user-supplied input and improper query preparation. Attackers with editor privileges or higher can exploit this flaw to inject malicious SQL commands and retrieve sensitive data from the database.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings