AffiEasy

AffiEasy has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.5 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, one record each. AffiEasy is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all AffiEasy vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2023-33999

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get

Read the full analysis

Vulnerability Records

3 records
AffiEasy banner
Latestv1.2.2
5.0(2)
100/100
Last Updated
2026-03-12 (6mo ago)
Active Installs
20+
Downloads
3,649
Requires WP
5.1+
Requires PHP
7.2+
Tested up to
WP 6.9.7
Created
2021-03-10 (6y ago)

AffiEasy is a WordPress plugin for affiliate marketers and content publishers who want to manage links and tables without rebuilding tracking URLs by hand every time. The plugin is built around two main concepts: Webshops: each webshop stores your affiliate URL pattern and optional display preferences. Reusable links and tables: create links once, reuse them anywhere with shortcodes, and insert them inside responsive comparison tables. Typical workflow: Create a webshop with an affiliate URL template such as https://www.awin1.com/cread.php?p=[[product_url]]&clickref=[[click_ref]] Create affiliate links from that webshop by filling only the variable values like product_url and click_ref Insert links anywhere with the [affieasy_link id=123] shortcode Build tables with text, HTML, images, and affiliate buttons, then display them with [affieasy_table_content id=1] AffiEasy also includes a quick-link metabox in the post and page editor. Paste a product URL, let the plugin detect the matching shop from its domain, and generate a short redirect URL in one click. See the video below to discover the possibilities offered by this plugin. Features Create unlimited webshops with affiliate URL templates based on placeholders like [[product_url]] and [[click_ref]] Save default affiliate button preferences per webshop: link text, background color, and text color Optional product domain mapping per webshop for automatic shop detection from a product URL Optional URL encoding for product URLs when a partner network requires it Create unlimited reusable affiliate links outside tables Insert affiliate links anywhere with the [affieasy_link id=...] shortcode Copy both the shortcode and the generated short redirect URL for each saved link Manage link label, category, nofollow, and open-in-new-tab options Search and sort saved links by webshop, label, category, short URL, or final URL Quick affiliate link creation from the post/page editor with automatic webshop detection Automatic prefill of category and click_ref from the current post slug when creating links from a post context Create unlimited tables and duplicate existing tables Build table cells with text, custom HTML, images, or one or more affiliate buttons Use column headers, row headers, both, or no headers Customize header background color, text color, font size, and font weight Control table max width, body background color, and responsive breakpoint Display a dedicated responsive mobile layout below the chosen breakpoint Use built-in icon placeholders in cells such as %TICK%, %CROSS%, %INFO%, %WARNING%, %HEART%, %LOCK%, %EMPTY-STAR%, and %FILLED-STAR% Manage everything from a dedicated WordPress admin menu: Tables, Affiliate links, and Webshops

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C