CVE Intelligence

Miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin: 1 record(s), with affected versions and fixes.

CVE-2025-11451 High · 7.5 CWE-73 Nov 11, 2025
Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read
The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aal_ajax_unit_loading' RST API endpoint. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.