Known vulnerabilities in Coupon Affiliates – Affiliate Plugin for WooCommerce
The most powerful affiliate plugin for WooCommerce. Track commission, generate referral URLs, assign affiliate coupons, and display detailed stats.
13Reported vulnerabilities
8.8Highest CVSS score
8.1.1Latest version
5,000+Active installs
What to do now
Update Coupon Affiliates – Affiliate Plugin for WooCommerce to 7.8.2 or later.
13 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| WF-2657aa8a-b2de-4cb4-b9f8-e7fb0c887a7a | High | — | Before 4.11.3.4 | 4.11.3.4 |
October 11, 2021 |
| CVE-2023-28992 | High | 0.4% | 5.4.3 and earlier | 5.4.4 |
March 31, 2023 |
| CVE-2026-40770 | High | 0.2% | 7.5.3 and earlier | 7.6.0 |
April 21, 2026 |
| CVE-2024-12421 | Medium | 0.5% | 0 to 5.16.7.1 (inclusive) | 5.16.7.2 |
December 13, 2024 |
| CVE-2025-3598 | Medium | 0.4% | 0 to 6.3.0 (inclusive) | 6.3.1 |
April 18, 2025 |
| CVE-2024-29125 | Medium | 0.4% | 5.12.7 and earlier | 5.12.8 |
March 16, 2024 |
| CVE-2023-30475 | Medium | 0.4% | 5.4.5 and earlier | 5.4.6 |
April 13, 2023 |
| WF-bdd0bdf3-6952-4b87-a3e8-156757d22e74 | Medium | — | 4.11.0.1 and earlier | 4.11.0.2 |
August 24, 2021 |
| CVE-2025-54025 | Medium | 0.3% | 6.4.1 and earlier | 6.4.2 |
August 6, 2025 |
| CVE-2025-62884 | Medium | 0.3% | 7.2.0 and earlier | 7.2.1 |
June 25, 2025 |
| CVE-2026-49068 | Medium | 0.4% | 7.8.1 and earlier | 7.8.2 |
June 9, 2026 |
| CVE-2025-59567 | Medium | 0.2% | 6.8.0 and earlier | 6.8.1 |
September 22, 2025 |
| CVE-2025-54022 | Medium | 0.2% | 6.4.0 and earlier | 6.4.1 |
July 16, 2025 |