Easy Affiliate Links
Easy Affiliate Links has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.
Every one of the 3 issues recorded for Easy Affiliate Links has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Easy Affiliate Links is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-34441Easy Affiliate Links <= 3.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Easy Affiliate Links
Author
Brecht
Easy Affiliate Links helps you manage all the affiliate links on your website. Both cloaked pretty links and regular non-cloaked links. Clicks get tracked for your links automatically. Learn more on our website and in our knowledge base. Current features: Compatible with both the Classic Editor and new Gutenberg Block Editor Add affiliate links in Elementor using their text widget Use regular links or affiliate HTML code Create shortlinks to optionally cloak your affiliate links Use ugc and sponsored attributes for your links Leave specific links uncloaked for Amazon compatibility Automatic text disclaimer for your affiliate links Easily access your links in the visual and html editor Assign categories to your links Tracking of monthly and lifetime click counts Import affiliate links from XML and CSV Ability to export your links to XML and CSV Use a CSV export and import to easily update your links in bulk Easy Affiliate Links Premium Looking for some more advanced functionality? We also have the Easy Affiliate Links Premium add-on available with the following features: Amazon Creators API integration to easily search and link products Get valuable insights with click statistics and charts Automatic broken links checker with email notifications Show an automatic tooltip disclaimer when hovering over links **Conditional geo or device targeted* links Use Replacement Links to (temporarily) swap affiliate links This plugin is under active development, so just let us know if you have any requests at all!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C