Medium severity5.4NVD Advisory· Published Apr 25, 2022· Updated Jun 17, 2026

CVE-2022-0398

Description

The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any authenticated user, such as subscriber to create arbitrary affiliate links, which could then be used to redirect users to an arbitrary website

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Affiliate Links Managercpe-rescue
Package: https://wordpress.org/plugins/affiliate-links-manager
WordPress/ThirstyAffiliates Affiliate Link Managerllm-fuzzy
Range: <3.10.5

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/21aec131-91ff-4300-ac7a-0bf31d6b2b24nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000