PLUGIN SECURITY
Is Wp Auto Affiliate Links safe?
Automatically display affiliate links in your website content so you can make more money. It is also working well for internal linking.
What this plugin does
- Slug:
wp-auto-affiliate-links - Author: Lucian Apostol
- 2000+ active installs
- 82/100 rating (39 reviews on wordpress.org)
- 1018054 all-time downloads
- On WordPress.org since 2011-01-14
affiliatekeywordslinksmarketingposts
Maintenance status
- Latest known version: 6.9.2
- Last updated: 2026-08-25 11:06pm GMT
- Tested up to WordPress: 7.1
Known vulnerabilities
9 known CVEs on file for Wp Auto Affiliate Links.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-24592 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.8.9 | Missing Authorization | Medium 5.3 | < 6.8.9 | 6.8.9 | 2026-05-25 | ✓ fixed in latest |
| CVE-2026-7330 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.8.8.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.2 | < 6.8.8.1 | 6.8.8.1 | 2026-05-07 | ✓ fixed in latest |
| CVE-2024-34386 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.4 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.6 | < 6.4.4 | 6.4.4 | 2024-05-06 | ✓ fixed in latest |
| CVE-2024-1843 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.3.1 | Missing Authorization | Medium 4.3 | < 6.4.3.1 | 6.4.3.1 | 2024-03-11 | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.2.8 | — | Unknown | < 6.4.2.8 | 6.4.2.8 | 2024-01-09 | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.2.6 | — | Unknown | < 6.4.2.6 | 6.4.2.6 | 2023-11-20 | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.2.6 | — | Unknown | < 6.4.2.6 | 6.4.2.6 | 2023-11-20 | ✓ fixed in latest |
| CVE-2023-47652 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.2.5 | Cross-Site Request Forgery (CSRF) | High 7.1 | < 6.4.2.5 | 6.4.2.5 | 2023-11-07 | ✓ fixed in latest |
+ 13 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-25973 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.3.0.3 | Cross-Site Request Forgery (CSRF) | Medium 5.4 | < 6.3.0.3 | 6.3.0.3 | 2023-02-22 | ✓ fixed in latest |
| CVE-2022-45840 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.2.1.6 | Missing Authorization | Medium 6.5 | < 6.2.1.6 | 6.2.1.6 | 2023-02-06 | ✓ fixed in latest |
| CVE-2023-22689 | Auto Affiliate Links [wp-auto-affiliate-links] < 6.3.0.1 | Cross-Site Request Forgery (CSRF) | Medium 5.4 | < 6.3.0.1 | 6.3.0.1 | 2023-02-02 | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 5.0 | — | Unknown | < 5.0 | 5.0 | 2015-07-15 | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 5.0 | — | Unknown | < 5.0 | 5.0 | 2015-07-15 | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.7 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Medium 5.4 | < 6.4.7 | 6.4.7 | 0000-00-00 | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 5.0 | — | Unknown | < 5.0 | 5.0 | — | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.2.6 | — | Unknown | < 6.4.2.6 | 6.4.2.6 | — | ✓ fixed in latest |
| — | Auto Affiliate Links [wp-auto-affiliate-links] < 6.4.2.8 | — | Unknown | < 6.4.2.8 | 6.4.2.8 | — | ✓ fixed in latest |
| — | Auto Affiliate Links < 5.0 - Authenticated Blind SQL Injection | — | Unknown | < 5.0 | 5.0 | — | ✓ fixed in latest |
| — | Auto Affiliate Links < 6.4.2.6 - Cross-Site Request Forgery | — | Unknown | < 6.4.2.6 | 6.4.2.6 | — | ✓ fixed in latest |
| — | Auto Affiliate Links < 6.4.2.8 - Cross-Site Request Forgery | — | Unknown | < 6.4.2.8 | 6.4.2.8 | — | ✓ fixed in latest |
| CVE-2024-9838 | Auto Affiliate Links < 6.4.7 - Admin+ SQL Injection | — | Unknown | < 6.4.7 | 6.4.7 | — | ✓ fixed in latest |
How to fix it
Keep Wp Auto Affiliate Links updated — 6.9.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Advanced Ads – Ad Manager & AdSense — 100000+ active installs — 98/100 (1461)
- Pochipp — 20000+ active installs — 84/100 (5) — max PHP 8.4
- Meks Easy Ads Widget — 10000+ active installs — 82/100 (14)
- Affiliate Program Suite — SliceWP Affiliates — 10000+ active installs — 98/100 (108) — max PHP 8.4
- Meks ThemeForest Smart Widget — 10000+ active installs — 100/100 (1)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.