Vulnerabilidades do Miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin: 1 registro(s), com versões afetadas e correções.

CVE-2025-11451 Alta · 7.5 CWE-73 11/11/2025

Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aal_ajax_unit_loading' RST API endpoint. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.