WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Auto Affiliate Links

Automatically display affiliate links in your website content so you can make more money. It is also working well for internal linking.

11Reported vulnerabilities
9.8Highest CVSS score
6.9.4Latest version
3,000+Active installs

What to do now

Update Auto Affiliate Links to 6.8.9 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
WF-438d73bb-80f1-460f-8c62-2a40856e4c29 Critical 9.8 — Before 5.0 5.0 July 15, 2015
CVE-2024-34386 Critical 9.1 0.5% 6.4.3.1 and earlier 6.4.4 May 6, 2024
CVE-2026-7330 High 7.2 0.4% 0 to 6.8.8 (inclusive) 6.8.8.1 May 8, 2026
CVE-2023-47652 Medium 6.1 0.2% 6.4.2.4 and earlier 6.4.2.5 November 7, 2023
WF-d89918e1-b525-4d32-9b11-5e014eb02c16 Medium 5.8 — 6.4.2.7 and earlier 6.4.2.8 January 9, 2024
CVE-2022-45840 Medium 5.4 0.6% 6.2.1.5 and earlier 6.2.1.6 February 6, 2023
CVE-2026-24592 Medium 5.3 0.2% 6.8.8.3 and earlier 6.8.9 May 25, 2026
CVE-2024-1843 Medium 4.3 0.5% Before 6.4.3.1 6.4.3.1 March 13, 2024
WF-17453fa5-af14-477b-9b3d-b245511ad8ce Medium 4.3 — 6.4.2.5 and earlier 6.4.2.6 November 20, 2023
CVE-2023-25973 Medium 4.3 0.2% 6.3.0.2 and earlier 6.3.0.3 February 22, 2023
CVE-2023-22689 Medium 4.3 0.3% 6.3 and earlier 6.3.0.1 February 2, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.