Skip to content
PluginCanary

affiliate-toolkit

affiliate-toolkit - Multi-Network Affiliate & Amazon Product Display
by SERVIT Software Solutions · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 22 Oct 2026, 12 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for affiliate-toolkit
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is affiliate-toolkit still maintained?
Yes. Last release 22 Oct 2026, 12 releases in the last 24 months. 22 Oct 2026 · wordpress.org
Who owns affiliate-toolkit, and has it changed hands?
No change recorded. Main committer cservit since Sep 2016. 3 Nov 2026 · SVN log
Was affiliate-toolkit removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is affiliate-toolkit safe?
20 known vulnerabilities, all fixed (latest in 3.9.3). Not on the exploited list. 27 Oct 2026 · Wordfence Intelligence
Is the latest affiliate-toolkit update safe to install?
No ownership change before 3.9.3. No one-star spike after it. 22 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cservit25 Sep 2016 to 22 Oct 2026, 208 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
13 days ago
Releases, 24 months
12
Tested up to
7.0 vs 7.1
Requires PHP
8.2 supported 8.2+
Releases per quarter
Releases per quarter for affiliate-toolkit
Q1 20240
Q2 20240
Q3 20240
Q4 20242
Q1 20250
Q2 20250
Q3 20250
Q4 20253
Q1 20260
Q2 20262
Q3 20262
Q4 20263

Last release 22 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star19
4 star0
3 star0
2 star0
1 star3

Security record

10 vulnerabilities in 24 months (20 on record), all patched (latest fixed in 3.9.3).

Show 20 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter7.5<= 3.9.23.9.3Patched before disclosure
27 Oct 2026affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parameter7.2<= 3.9.23.9.3Patched before disclosure
14 Oct 2026affiliate-toolkit <= 3.8.8 - Authenticated (Editor+) SQL Injection4.9<= 3.8.83.8.9Patched before disclosure
14 Oct 2026affiliate-toolkit - Multi-Network Affiliate & Amazon Product Display < 3.9.1 - Authenticated (Contributor+) Remote Code Execution8.8< 3.9.13.9.1Patched before disclosure
7 Oct 2026affiliate-toolkit - Multi-Network Affiliate & Amazon Product Display <= 3.9.1 - Authenticated (Administrator+) SQL Injection4.9<= 3.9.13.9.26
13 Aug 2026affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9<= 3.8.83.8.9Patched before disclosure
26 May 2026affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution7.2<= 3.8.4Not affectedn/a
22 Apr 2025affiliate-toolkit <= 3.7.3 - Cross-Site Request Forgery4.3<= 3.7.33.7.4n/a
23 Jan 2025affiliate-toolkit - WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.7.03.7.1n/a
20 Nov 2024affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting6.1<= 3.6.73.6.8Patched before disclosure
28 Oct 2024affiliate-toolkit <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atkp_product Shortcode6.4<= 3.6.53.6.6n/a
8 Aug 2024affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure5.3<= 3.5.53.6n/a
20 Jun 2024affiliate-toolkit <= 3.4.4 - Unauthenticated Sensitive Information Exposure via Logs5.3<= 3.4.43.4.5n/a
25 Mar 2024affiliate-toolkit <= 3.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via ratings6.4<= 3.4.53.4.6n/a
7 Mar 2024affiliate-toolkit - WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list6.3<= 3.5.43.5.5n/a
7 Mar 2024affiliate-toolkit - WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product4.3<= 3.5.43.5.5n/a
11 Dec 2023affiliate-toolkit <= 3.4.2 - Unauthenticated Server-Side Request Forgery6.5<= 3.4.23.4.3n/a
28 Nov 2023affiliate-toolkit - WordPress Affiliate Plugin <= 3.4.3 - Reflected Cross-Site Scripting via keyword6.1<= 3.4.33.4.4n/a
6 Oct 2023affiliate-toolkit - WordPress Affiliate Plugin <= 3.3.9 - Open Redirect via atkpout.php3.4<= 3.3.93.4.0n/a
30 Mar 2023affiliate-toolkit - WordPress Affiliate Plugin <= 3.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting5.5<= 3.3.33.3.4n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 3 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for affiliate-toolkit
4 May 2026117
11 May 2026199
18 May 2026161
25 May 20262,622
1 Jun 2026708
8 Jun 2026245
15 Jun 20261,192
22 Jun 2026285
29 Jun 2026206
6 Jul 2026232
13 Jul 2026168
20 Jul 2026173
27 Jul 2026266
3 Aug 20262,321
10 Aug 2026830
17 Aug 2026409
24 Aug 2026270
31 Aug 2026322
7 Sep 2026397
14 Sep 2026397
21 Sep 2026426
28 Sep 2026312
5 Oct 20261,669
12 Oct 20261,877
19 Oct 20261,770
26 Oct 20261,463
2 Nov 202687

Weekly downloads over the last 4 weeks are 83% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

BetterLinksScore 98 · 20,000+PrettyLinksScore 89 · 200,000+

Facts

Version3.9.3
AuthorSERVIT Software Solutions
Added25 Sep 2016
Last updated22 Oct 2026
Active installs2,000+
Requires WordPress5.6
Tested up to7.0.8
Requires PHP8.2
CategoryE-commerce & Shopping > Product Management & Catalogs
Tagsawin, ebay, amazon, affiliate, product display

Other plugins by this author: SERVIT Analytics, Reputify.io - Review Widgets, Score and Review Requests

Questions

Is affiliate-toolkit still maintained?

Yes. Last release 22 Oct 2026, 12 releases in the last 24 months.

Who owns affiliate-toolkit, and has it changed hands?

No change recorded. Main committer cservit since Sep 2016.

Was affiliate-toolkit removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is affiliate-toolkit safe?

20 known vulnerabilities, all fixed (latest in 3.9.3). Not on the exploited list.

Is the latest affiliate-toolkit update safe to install?

No ownership change before 3.9.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue