Affiliates Manager Google reCAPTCHA Integration
Affiliates Manager Google reCAPTCHA Integration has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Affiliates Manager Google reCAPTCHA Integration has a vendor fix available, so running the current release closes it.
All of these findings were reported by johska. Affiliates Manager Google reCAPTCHA Integration is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-48233Affiliates Manager Google reCAPTCHA Integration <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Affiliates Manager Google reCAPTCHA Integration
Author
affmngr
This addon allows you to specify your Google reCAPTCHA V2 API credentials in the addon settings. When affiliates go to the registration page, they will need to manually verify that they are not a robot before submitting the form. This addon requires the Affiliates Manager Plugin. After you install this addon, go to the Google reCAPTCHA settings interface, specify your V2 API credentials and save the settings. Read the following page for step by step usage documentation: https://wpaffiliatemanager.com/affiliates-manager-google-recaptcha-integration/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C