Auto Affiliate Links

Auto Affiliate Links has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 12 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 1 high. 2023 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 5 of the records (42%). Other recurring categories include SQL Injection, Missing Authorization.

Every one of the 12 issues recorded for Auto Affiliate Links has a vendor fix available, so running the current release closes all known holes.

10 independent researchers contributed these findings, one record each. Auto Affiliate Links is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

12

Get automatic notifications for all Auto Affiliate Links vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8

Auto Affiliate Links < 5.0 - SQL Injection

Read the full analysis

Vulnerability Records

12 records
2026-05-25 00:00CVE-2026-24592
5.3
Medium
Nabil IrawanYes
2026-05-07 20:01CVE-2026-7330
7.2
High
DJumantoYes
2024-09-18 00:00CVE-2024-9838
4.9
Medium
y4ng0615Yes
2024-05-06 00:00CVE-2024-34386
9.1
Critical
Do Truong GiangYes
2024-03-11 00:00CVE-2024-1843
4.3
Medium
Lucio SáYes
2024-01-09 00:00N/A
5.8
Medium
AnonymousYes
2023-11-20 00:00N/A
4.3
Medium
AnonymousYes
2023-11-07 00:00CVE-2023-47652
6.1
Medium
LEE SE HYOUNGYes
2023-02-22 00:00CVE-2023-25973
4.3
Medium
Rio DarmawanYes
2023-02-06 00:00CVE-2022-45840
5.4
Medium
Nguyen Anh TienYes
Showing 1–10 of 12 reports
Auto Affiliate Links banner
Latestv6.9.9

Auto Affiliate Links

Lucian Apostol

Author

Lucian Apostol

4.1(39)
82/100
Last Updated
2026-09-12 (16h ago)
Active Installs
2,000+
Downloads
1,030,502
Requires WP
3.5+
Requires PHP
0+
Tested up to
WP 7.1
Created
2011-01-14 (16y ago)

Auto Affiliate Links will automatically add affiliate links into your content. You can manually set affiliate links and keywords where they should be added into your content, or you can let the plugin to automatically extract and display links from Amazon, Clickbank, Shareasale, Ebay, Walmart, Commission Junction, BestBuy and Envato Marketplace. IMPORTANT: Your content won’t be modified in any way. The links are added when the content is displayed. If you prefer to select your keywords and add your links manually, you can do this from “Auto Affiliate Links” menu in your administration panel. In “General Settings” you can set if you want the links to be cloaked, if you want them to be added on your homepage or not and several other options. Also, you will have options to make the links nofollow or dofollow, to open in new page or same page and to cloak links. The plugin will give you the most used 100 keywords from your content si you can easily add affiliate links to appear when they are displayed. You can limit the number of links that are shown in every article. The frequency range from “Very Low” to “Very High”. At Very Low level only 1 link will be displayed in every article. At “Very High” frequency a maximum of 5 links will be added to every article. If you choose to automatically generate and display links from Amazon, Clickbank or Shareasale you have to first request an API key, and then to activate each module. The links will be added trough javascript so you do not have to worry about nofollowing and search engines.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C