Unknown ThirstyAffiliates

• CVE-2026-97314 Medium 6.5 ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection 0.2%
• CVE-2022-0634 Unrated ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF 0.3%
• CVE-2021-24127 Unrated ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS 0.7%