Vulnerabilities / ThirstyAffiliates Affiliate Link Manager
ThirstyAffiliates Affiliate Link Manager vulnerabilities
Advisories WPSec published for ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin. Other sources may list more. Its attack surface: ThirstyAffiliates Affiliate Link Manager on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-15 | WPSEC-2026-1038 | ThirstyAffiliates Affiliate Link Manager <= 3.12.0 - Unauthenticated Information Exposure of Unpublished Affiliate Links via 'ta_click_data_redirect' and 'ta_link_fixer' AJAX Actions | Medium 6.5 | 3.12.1 |
| 2026-10-15 | WPSEC-2026-1037 | ThirstyAffiliates Affiliate Link Manager <= 3.12.0 - Missing Authorization to Authenticated (Contributor+) Stripe API Key Exposure via Payments Settings Tab | Medium 6.5 | 3.12.1 |
License: CC BY 4.0