CVE-2024-5864

A security flaw exists in Easy Affiliate Links plugin for WordPress, affecting versions prior to 3.7.4, where an insufficient capability check allows users with a minimum of Subscriber permissions to execute the eafl_reset_settings AJAX action without authorization, enabling them to modify plugin settings. This vulnerability can be exploited by authenticated attackers to reset the plugin's configuration.

Based on public CVE data (MITRE/NVD).