Extension WordPress
Vulnérabilités Auto Amazon Links – Amazon Associates Affiliate Plugin
Cette page rassemble les failles publiées pour Auto Amazon Links – Amazon Associates Affiliate Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Auto Amazon Links – Amazon Associates Affiliate Plugin
5 fiches
Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 – Unauthenticated Arbitrary File Read
The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aal_ajax_unit_loading' RST API endpoint. This makes it possible for unauthenticated…
*-5.4.3
Non indiqué
10/11/2025
Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.2 – Reflected Cross-Site Scripting
The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.4.2.…
*-5.4.2
5.4.3
03/10/2024
Auto Amazon Links <= 5.1.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible…
*-5.1.1
5.1.2
29/12/2023
Auto Amazon Links <= 5.3.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via style
The Auto Amazon Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the style parameter in versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-5.3.1
5.3.2
05/09/2023
Amazon Auto Links <= 4.6.19 – Reflected Cross-Site Scripting
The Amazon Auto Links plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' and 'name' values in versions up to, and including, 4.6.19 due to insufficient input sanitization and output escaping. This makes it possible…
*-4.6.19
4.6.20
16/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.
