https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:35:48.857154+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-11451 CVE-2025-11451 — Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read 2026-10-09T19:35:48.872899+00:00

Affected: miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aal_ajax_unit_loading' RST API endpoint. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.