CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-67537 | ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin [thirstyaffiliates] < 3.11.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 3.11.9 | 3.11.9 | 2025-12-09 | — |
The ThirstyAffiliates plugin for WordPress contains a security flaw in versions 3.11.8 and earlier, allowing malicious users with contributor privileges or higher to embed unauthorized code snippets into website content. This embedded code can be executed when a visitor views the affected webpage, potentially leading to further exploitation.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.