TH
Product
ThirstyAffiliates
by · last CVE Oct 17, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add ThirstyAffiliates to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97314
6.5
0%
Oct 17
ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection
Affected: before 3.12.1
CVE-2021-24127
5.4
1%
Mar 18
ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
Affected: 3.9.3 before 3.9.3
CVE-2022-0634
4.3
0%
Apr 25
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
Affected: before 3.10.5
Showing 3