CVE Database /
CVE-2026-24592
CVE · Medium
CVE-2026-24592 — Auto Affiliate Links [wp-auto-affiliate-links] < 6.8.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-24592
|
Auto Affiliate Links [wp-auto-affiliate-links] < 6.8.9 |
Missing Authorization |
Medium
5.3
|
< 6.8.9
|
6.8.9 |
2026-05-25 |
—
|
CVE-2026-24592
A security flaw exists in the Auto Affiliate Links plugin for WordPress, where insufficient permission checks allow unverified users to execute certain actions without proper authorization. The vulnerability affects versions of the plugin up to and including 6.8.8.3, enabling malicious actors to bypass standard access controls.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings