CVE-2026-97314: ThirstyAffiliates 0 to before 3.12.1

Affected technology

ThirstyAffiliates · 0 to before 3.12.1
Vendor not specified by the source

Description’s affected range: before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics.