Affiliate Links

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13556 Feb 18, 06:15 HIGH PATCH This Week

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

PHP WordPress Authentication Bypass Information Disclosure Deserialization +2

NVD

CVSS 3.1

8.1

EPSS

2.5%

CVE-2024-13556

EPSS 2% CVSS 8.1

HIGH PATCH This Week

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

PHP WordPress Authentication Bypass +4

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy