Plugin has unpatched CSRF and XSS vulnerabilities
Security scanners report unpatched cross site request forgery and script injection flaws in the plugin, with no timeline.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 9 November 2023 · last reported 27 May 2026
What's going wrong
Site owners using Auto Affiliate Links say their security scanners flagged the plugin for cross site request forgery and stored cross site scripting flaws, sometimes right after an update.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.