cleantalk
Vulnerabilities and Security Researches

ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin, CVE-2026-25024

CVE, Research URL

CVE-2026-25024

Published on
Feb 03, 2026
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Blair Williams ThirstyAffiliates thirstyaffiliates allows Cross Site Request Forgery.This issue affects ThirstyAffiliates: from n/a through <= 3.11.9.
Affected versions
max 3.11.10.
Status
vulnerable