Anytrack Affiliate Link Manager Vulnerabilities

The AnyTrack Affiliate Link Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.5.5

Fix:

No patched version reported

Disclosed:

Mar 2, 2026

CVE-2026-39715 on NVD →

[en] Missing Authorization vulnerability in NotFound AnyTrack Affiliate Link Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AnyTrack Affiliate Link Manager: from n/a through 1.0.4.

Affected:

up to 1.0.4

Fix:

No patched version reported

Disclosed:

Apr 11, 2025

CVE-2025-31041 on NVD →

The AnyTrack Affiliate Link Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.0.4

Fixed in:

1.5.5

Disclosed:

Apr 9, 2025

CVE-2025-31041 on NVD →