What is GHSA-52ff-p635-qf9p?

GHSA-52ff-p635-qf9p is a security advisory published by GitHub Security Advisories with Medium severity. The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the...

Which CVE IDs does GHSA-52ff-p635-qf9p cover?

GHSA-52ff-p635-qf9p covers the following CVE IDs: CVE-2026-97314. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-52ff-p635-qf9p?

GHSA-52ff-p635-qf9p has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-52ff-p635-qf9pMediumCVSS 6.5

The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the...

Vendor

GitHub Security Advisories

Published

October 17, 2026

Last Modified

October 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-97314 →

📋 Description

The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-97314
https://wpscan.com/vulnerability/37e0a31e-39cc-4035-ae27-b34e7ec8f0d0
https://github.com/advisories/GHSA-52ff-p635-qf9p