Add & Replace Affiliate Links for Amazon
Add & Replace Affiliate Links for Amazon has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Add & Replace Affiliate Links for Amazon has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. Add & Replace Affiliate Links for Amazon is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.8.15.
CVE-2025-53285Add & Replace Affiliate Links for Amazon <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Add & Replace Affiliate Links for Amazon
Author
The Website Flip
Add & Replace Affiliate Links for Amazon plugin helps you to add or update Amazon Associate tag parameters in links. The plugin automatically changes out shortened amazon links (e.g., amzn.to) that hide the Amazon Associate tag to a long-form link: Short form: https://amzn.to Long form: https://www.amazon.com/dp/PRODUCTASIN?tag=TEST123-20 Why is this important? Many website creators use shortened Amazon links. However, if you want to change your affiliate ID tag, you will need to manually find and replace these shortened links with articles. This plugin will automatically find all shortened links on your website, and replace them with long links that embed your affiliate ID tag. You save hours of time finding and replacing links, and can immediately start earning revenue to your Amazon Associates account. Features of the Plugin Automatically finds shortened links in all articles. Expands the links to their original long-form. Replaces the Amazon Associates affiliate ID tag to the one you provided. Automatically replaces all links to their long-form with your own tag. Ability to add “rel=nofollow” to links.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C