CVE-2026-39715
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The AnyTrack Affiliate Link Manager plugin for WordPress up to version 1.5.5 has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.
Risk Assessment
The organization risks unauthorized access to affiliate link management functions, potentially leading to settings manipulation and data leakage.
Recommendation
Update the AnyTrack Affiliate Link Manager plugin to the latest version. Review WordPress permission settings.
Original NVD description (English source)
Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through <= 1.5.5.