Advisories · Technology

Blair Williams ThirstyAffiliates.

Every CVE that names Blair Williams ThirstyAffiliates among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-25024 CVE record

CVSS 5.4 Medium

WordPress ThirstyAffiliates plugin <= 3.11.9 - Cross Site Request Forgery (CSRF) vulnerability
- Blair Williams ThirstyAffiliates
- Cross-site request forgery (CSRF)
Not analysed yet 3 Feb 2026
CVE-2025-67537 CVE record

CVSS 6.5 Medium

WordPress ThirstyAffiliates plugin <= 3.11.8 - Cross Site Scripting (XSS) vulnerability
- Blair Williams ThirstyAffiliates
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2025