Affiliate Link Tracker

Affiliate Link Tracker has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Affiliate Link Tracker has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nabil Irawan. Affiliate Link Tracker is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.5.20.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Affiliate Link Tracker vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-62077

Affiliate Link Tracker <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Affiliate Link Tracker banner
Latestv0.2

Affiliate Link Tracker

SEOSEON EUROPE S.L

Author

SEOSEON EUROPE S.L

5.0(3)
100/100
Last Updated
2020-09-16 (6y ago)
Active Installs
500+
Downloads
3,683
Requires WP
3.0.1+
Requires PHP
5.2+
Tested up to
WP 5.5.20
Created
2020-04-20 (7y ago)

This advanced affiliate link tracking plugin allows you to forward key information about your visitors to your affiliate network’s backend. Mask and make pretty affiliate links that automatically append UTM tags and referral information as a sub id. The problem You can use analytics tools to see who visits your website, where they come from and which links they click on your website, but in your affiliate network’s backend, you can only see which affiliate link they clicked – not how they got to your website. The solution Forward the key information to your affiliate network with our advanced affiliate link tracker WordPress plugin! How does it work? This plugin works by creating a cookie containing the incoming URL parameters (UTM tags) and HTTP referrer for each user, and appends this information to your outbound affiliate links, via a tracking tag supplied by the specific affiliate network (ex: sub ID, source, ref, epi). Features The cookie will automatically append your selected links with the following information (if they are set): * HTTP referrer * Standard UTM tags The HTTP referrer is simply the website they came from (if any). It could be google.com if they found it via organic search, a social network, or another website that links to yours. UTM tags are commonly used to append URLs with information about their usage and placement. The standard UTM tags and their typical usage is listed below, but any information can be placed inside any tag. Supported tags: utm_source = The website, app or service utm_campaign = The specific campaign utm_medium = The type of, or the specific ad utm_term = The specific keyword used utm_content = The specific placement of the link NOTE This plugin does not set your links to “nofollow” or block any crawlers from visiting them. If you don’t want non-human visitors to follow these links, you will have to block them yourself. About This is a free plugin from digital marketing agency SEOSEON. It is based on Redirect List, but has been modified to function as an affiliate link tracker. The goal was to create a very simple, light redirect plugin with advanced affiliate link tracking features built in. Future versions may add more tags, features and customization options. How to use it NOTE In order to get the most out of this plugin, you need to append your inbound links with UTM tags containing information about the link. Enter the URL you want to redirect FROM in the LEFT input box. Enter the URL you want to redirect TO in the RIGHT input box. Select the tracking tag that your affiliate network uses from the dropdown menu. The FROM URL should be an internal link in your website, for example: /go/amazon The TO URL should be your unique affiliate tracking link, for example: https://amzn.to/2nD9fjb9A This plugin will add the UTM tags and the HTTP referrer to the tracking tag as a text string, for example: https://amzn.to/2nD9fjb9A?r=google-cpc-sunglasses-goole.com You can now see this string of text in your affiliate backend, so that you can tell which campaign, ad, website, blog or social media post led to the conversion. Finally! If the URL contains other URL parameters (or not), this plugin will automatically add a preceding &#8216;?’ or &#8216;&’ symbol as needed. For testing purposes, you can use the shortcode [aff_lnk_view_cookie] to display the string of text currently stored in your current cookie. Every time a particular link is clicked, a hit will be added to the hit counter. This helps you spot missing conversions.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C