CVE-2026-24592: Lucian Apostol Auto Affiliate Links

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affiliate Links: from n/a through 6.8.8.3.

Affected products

• Lucian Apostol Auto Affiliate Links: up to and including 6.8.8.3

Published 2026-05-25. Last modified 2026-07-24.