Caseproof Thirstyaffiliates Affiliate Link Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Caseproof Thirstyaffiliates Affiliate Link Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-24127 — CVSS 5.4 (medium): Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was…
• CVE-2022-0398 — CVSS 5.4 (medium): The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating…
• CVE-2022-0634 — CVSS 4.3 (medium): The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a…