Affiliates
Healthy: vulnerability published 12 Oct 2026, fixed in 7.1.0.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 12 Oct 2026, fixed in 7.1.0. Update to version 7.1.0 or later.12 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| itthinx | 7 Jun 2011 to 9 Oct 2026, 418 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 26 days ago
- Releases, 24 months
- 10
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 1 |
| Q3 2025 | 2 |
| Q4 2025 | 1 |
| Q1 2026 | 1 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 3 |
Last release 9 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 12 Oct 2026 | Affiliates <= 7.0.1 - Unauthenticated PHP Object Injection | 8.1 | <= 7.0.1 | 7.1.0 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.5 from 137 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 112 |
|---|---|
| 4 star | 9 |
| 3 star | 2 |
| 2 star | 2 |
| 1 star | 12 |
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 142 |
|---|---|
| 11 May 2026 | 183 |
| 18 May 2026 | 274 |
| 25 May 2026 | 179 |
| 1 Jun 2026 | 147 |
| 8 Jun 2026 | 155 |
| 15 Jun 2026 | 122 |
| 22 Jun 2026 | 120 |
| 29 Jun 2026 | 123 |
| 6 Jul 2026 | 108 |
| 13 Jul 2026 | 139 |
| 20 Jul 2026 | 115 |
| 27 Jul 2026 | 137 |
| 3 Aug 2026 | 136 |
| 10 Aug 2026 | 121 |
| 17 Aug 2026 | 157 |
| 24 Aug 2026 | 189 |
| 31 Aug 2026 | 121 |
| 7 Sep 2026 | 121 |
| 14 Sep 2026 | 143 |
| 21 Sep 2026 | 154 |
| 28 Sep 2026 | 149 |
| 5 Oct 2026 | 3,215 |
| 12 Oct 2026 | 653 |
| 19 Oct 2026 | 379 |
| 26 Oct 2026 | 449 |
| 2 Nov 2026 | 36 |
Weekly downloads over the last 4 weeks are 29% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 7.1.0 |
|---|---|
| Author | itthinx |
| Added | 7 Jun 2011 |
| Last updated | 9 Oct 2026 |
| Active installs | 2,000+ |
| Requires WordPress | 6.5 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | referral, affiliate, affiliates, growth marketing, affiliate marketing |
Other plugins by this author: Groups - Memberships and Access Control, Open Graph Protocol Framework, Coupon Shortcodes for WooCommerce, Decent Comments, Affiliates WooCommerce Light, Groups 404 Redirect, Widgets Control, Search Live, Product Generator for WooCommerce, Affiliates Contact Form 7 Integration, Lazy Widget Loader, Documentation - Build a Knowledge Base, Help Center or Wiki
Questions
Is Affiliates still maintained?
Affiliates was last updated on 9 Oct 2026. Its Canary status is Healthy.
Is Affiliates safe?
Affiliates has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns Affiliates?
The wordpress.org author is itthinx. Recent committers: itthinx, plugin-master. We have recorded no ownership change.
What can I use instead of Affiliates?
Plugins in the same category with a higher Canary Score: AffiliateWP - Affiliate Area Tabs, Affiliate Area Shortcodes by AffiliateWP, AffiliateWP - Order Details For Affiliates, FluentAffiliate - Affiliate Program Management Suite, Affiliates Manager, AffiliateWP - Affiliate Product Rates.