Plugin icon

WC Affiliate – WooCommerce Affiliate Plugin

wc-affiliate

Vulnerabilities:

4

Last Updated:

July 23, 2026

Active Installs:

200

Published
Title
Fixed in
CVSS
Published
2025-05-16
Title
WC Affiliate < 2.17 - Subscriber+ PHP Object Injection
Fixed in
Fixed in 2.17
CVSS
7.5 (high)
Published
2025-03-14
Title
WC Affiliate – A Complete WooCommerce Affiliate Plugin < 2.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all
Fixed in
Fixed in 2.6
CVSS
6.5 (medium)
Published
2025-01-25
Title
WC Affiliate – A Complete WooCommerce Affiliate Plugin < 2.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.5
CVSS
6.1 (medium)
Published
2025-01-06
Title
WC Affiliate < 2.4 - Reflected XSS
Fixed in
Fixed in 2.4
CVSS
7.1 (high)