affiliate-toolkit · Security record
Is affiliate-toolkit safe?
One known vulnerability affects the current version (3.9.3), and it has no fix yet.
Checked 3 days ago against the WPVulnerability database, for version 3.9.3.
How it’s looked after
- Last release
- Oct 22, 2026 (2 weeks ago)
- Releases in the last year
- 8
- Tested up to
- WordPress 7.0.8
- Support resolved
- 3 of 3 threads in two months
- Active installs
- 2K+
20 known vulnerabilities
- 1 critical
- 6 high
- 11 medium
- 2 not rated
1 affects the current version. 1 has no fix yet.
Disclosed each year
- 20234
- 20247
- 20252
- 20267
Every known vulnerability in affiliate-toolkit
Newest first, with any that affect the current version at the top.
Affects the current version · No fix yet · CVE-2026-6169 · May 26, 2026 · Wordfence
Fixed in 3.9.3 · CVE-2026-111255 · Oct 27, 2026 · Wordfence
Fixed in 3.9.3 · CVE-2026-111314 · Oct 27, 2026 · Wordfence
Fixed in 3.8.9 · CVE-2026-110179 · Oct 14, 2026 · Wordfence
Fixed in 3.9.1 · CVE-2026-86787 · Oct 7, 2026 · Wordfence
Fixed in 3.9.2 · CVE-2026-42721 · Aug 13, 2026 · Wordfence
Fixed in 3.8.9 · CVE-2026-12743 · Aug 13, 2026 · Wordfence
Fixed in 3.7.4 · CVE-2025-46231 · Apr 22, 2025 · Wordfence
Fixed in 3.7.1 · CVE-2026-15296 · Jan 23, 2025 · Wordfence
Fixed in 3.6.8 · CVE-2024-10675 · Nov 20, 2024 · Wordfence
Fixed in 3.6.6 · CVE-2024-10227 · Oct 28, 2024 · Wordfence
Fixed in 3.6 · CVE-2024-6562 · Aug 8, 2024 · Wordfence
Fixed in 3.4.5 · CVE-2024-37205 · Jun 20, 2024 · Wordfence
Fixed in 3.4.6 · CVE-2024-29817 · Mar 25, 2024 · Wordfence
Fixed in 3.5.5 · CVE-2024-2298 · Mar 7, 2024 · Wordfence
Fixed in 3.5.5 · CVE-2024-1851 · Mar 7, 2024 · Wordfence
Fixed in 3.4.3 · CVE-2023-5877 · Dec 11, 2023 · Wordfence
Fixed in 3.4.4 · CVE-2023-46086 · Nov 28, 2023 · Wordfence
Fixed in 3.4.0 · CVE-2023-45105 · Oct 6, 2023 · Wordfence
Fixed in 3.3.4 · CVE-2023-23786 · Mar 30, 2023 · Wordfence
Questions about affiliate-toolkit’s security
Is affiliate-toolkit safe to use?
Yes: 1 known vulnerability affects version 3.9.3, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.
Does affiliate-toolkit have known security vulnerabilities?
Yes: 1 known vulnerability affects version 3.9.3, according to WPVulnerability’s database.
Is affiliate-toolkit still maintained?
Yes. Its last release was 2 weeks ago. Its authors resolved 3 of the 3 support threads opened in the last two months.
Is affiliate-toolkit compatible with the latest WordPress?
It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.