Advisories · Technology

ThirstyAffiliates.

Every CVE that names ThirstyAffiliates among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97314 CVE record

CVSS 6.5 Medium

ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection
- ThirstyAffiliates
- Information disclosure
Not analysed yet 17 Oct 2026
CVE-2022-0634 CVE record

ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
- ThirstyAffiliates
Not analysed yet 25 Apr 2022
CVE-2021-24127 CVE record

ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
- ThirstyAffiliates
- Cross-site scripting (XSS)
Not analysed yet 18 Mar 2021