Auto Affiliate Links
Auto Affiliate Links has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 12 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 1 high. 2023 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 5 of the records (42%). Other recurring categories include SQL Injection, Missing Authorization.
Every one of the 12 issues recorded for Auto Affiliate Links has a vendor fix available, so running the current release closes all known holes.
10 independent researchers contributed these findings, one record each. Auto Affiliate Links is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
Auto Affiliate Links < 5.0 - SQL Injection
Read the full analysisVulnerability Records

Auto Affiliate Links
Author
Lucian Apostol
Auto Affiliate Links will automatically add affiliate links into your content. You can manually set affiliate links and keywords where they should be added into your content, or you can let the plugin to automatically extract and display links from Amazon, Clickbank, Shareasale, Ebay, Walmart, Commission Junction, BestBuy and Envato Marketplace. IMPORTANT: Your content won’t be modified in any way. The links are added when the content is displayed. If you prefer to select your keywords and add your links manually, you can do this from “Auto Affiliate Links” menu in your administration panel. In “General Settings” you can set if you want the links to be cloaked, if you want them to be added on your homepage or not and several other options. Also, you will have options to make the links nofollow or dofollow, to open in new page or same page and to cloak links. The plugin will give you the most used 100 keywords from your content si you can easily add affiliate links to appear when they are displayed. You can limit the number of links that are shown in every article. The frequency range from “Very Low” to “Very High”. At Very Low level only 1 link will be displayed in every article. At “Very High” frequency a maximum of 5 links will be added to every article. If you choose to automatically generate and display links from Amazon, Clickbank or Shareasale you have to first request an API key, and then to activate each module. The links will be added trough javascript so you do not have to worry about nofollowing and search engines.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C