Now officially on WordPress.org

CVE Database / CVE-2026-25024

CVE · Medium

CVE-2026-25024 — ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin [thirstyaffiliates] < 3.11.10

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-25024 ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin [thirstyaffiliates] < 3.11.10 Cross-Site Request Forgery (CSRF) Medium 5.4 < 3.11.10 3.11.10 2026-02-02 —

CVE-2026-25024

The ThirstyAffiliates plugin for WordPress has a security weakness in versions up to 3.11.9, allowing malicious individuals to manipulate the system without proper authorization. This vulnerability arises from inadequate verification of a specific function's input, making it susceptible to exploitation by attackers who can deceive site administrators into taking certain actions.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings