Skip to content
PluginCanary

Affiliates Manager

by wp.insider · 8,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 18 Aug 2026, fixed in 2.9.54.

84/ 100 Canary Score
Sub-scores for Affiliates Manager
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 18 Aug 2026, fixed in 2.9.54. Update to version 2.9.54 or later.18 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 18 Aug 2026, fixed in 2.9.54. Update to version 2.9.54 or later.18 Aug 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mra135 Jun 2014 to 3 Nov 2026, 28 commits
affmngr20 Dec 2014 to 9 Jul 2026, 267 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
10
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Affiliates Manager
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20251
Q2 20253
Q3 20250
Q4 20250
Q1 20261
Q2 20261
Q3 20262
Q4 20262

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

50% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
18 Aug 2026Affiliates Manager <= 2.9.53 - Unauthenticated SQL Injection7.5<= 2.9.532.9.540
18 Aug 2026Affiliates Manager <= 2.9.53 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.9.532.9.540
26 Jun 2026Affiliates Manager <= 2.9.49 - Missing Authorization4.3<= 2.9.492.9.500
8 Jun 2026Affiliates Manager <= 2.9.50 - Unauthenticated Information Exposure5.3<= 2.9.502.9.51n/a
30 Jan 2024Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery4.3<= 2.9.342.9.35n/a
28 Dec 2023Affiliates Manager <= 2.9.30 - Sensitive Information Exposure via Log File5.3<= 2.9.302.9.31n/a
28 Dec 2023Affiliates Manager <= 2.9.31 - Cross-Site Request Forgery via multiple AJAX actions6.5<= 2.9.312.9.32n/a
29 Mar 2023Affiliates Manager <= 2.9.20 - Cross-Site Request Forgery via process_bulk_action()4.3<= 2.9.202.9.21n/a
16 Aug 2022Affiliates Manager <= 2.9.13 - Reflected Cross-Site Scripting6.1<= 2.9.132.9.14n/a
16 Aug 2022Affiliates Manager <= 2.9.13 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5<= 2.9.132.9.14n/a
16 Aug 2022Affiliates Manager <= 2.9.13 - CSV Injection9<= 2.9.132.9.14n/a
16 Aug 2022Affiliates Manager <= 2.9.13 - Cross-Site Request Forgery8.8<= 2.9.132.9.14n/a
24 Dec 2021Affiliates Manager <= 2.8.9 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.8.92.9.0n/a
11 Oct 2021Affiliate Manager <= 2.8.6 - Admin+ SQL injection7.2<= 2.8.62.8.7n/a
11 Sep 2020Affiliates Manager <= 2.7.7 - Cross-Site Scripting6.1< 2.7.82.7.8n/a
26 May 2019Affiliates Manager <= 2.6.5 - Cross-Site Request Forgery8.8< 2.6.62.6.6127

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.1 from 61 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star43
4 star4
3 star1
2 star3
1 star10

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Affiliates Manager
4 May 2026227
11 May 2026428
18 May 2026936
25 May 20263,906
1 Jun 20261,095
8 Jun 20264,728
15 Jun 2026902
22 Jun 2026582
29 Jun 2026679
6 Jul 20264,207
13 Jul 20261,129
20 Jul 2026617
27 Jul 2026600
3 Aug 2026490
10 Aug 20264,592
17 Aug 20261,419
24 Aug 2026730
31 Aug 20264,011
7 Sep 2026952
14 Sep 20261,034
21 Sep 2026781
28 Sep 2026555
5 Oct 2026535
12 Oct 20263,965
19 Oct 20261,113
26 Oct 20261,237
2 Nov 2026103

Weekly downloads over the last 4 weeks are 4% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

AffiliateWP - Affiliate Area TabsScore 91 · 3,000+Affiliate Area Shortcodes by AffiliateWPScore 91 · 2,000+AffiliateWP - Order Details For AffiliatesScore 91 · 2,000+FluentAffiliate - Affiliate Program Management Suite, Affiliates ManagerScore 91 · 2,000+AffiliateWP - Affiliate Product RatesScore 91 · 1,000+

Facts

Version2.9.57
Authorwp.insider
Added5 Jun 2014
Last updated3 Nov 2026
Active installs8,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsaffiliate, affiliates, woocommerce, affiliate program, affiliate marketing

Other plugins by this author: Simple Membership, Simple Membership After Login Redirection, Simple Membership Custom Messages, Simple Membership WP user Import, Simple Membership Form Shortcode, Payment Gateway for PayPal Pro, PayPal Checkout & Subscriptions for WooCommerce, Simple Membership MailChimp Integration, Payment Gateway Braintree WooCommerce, Affiliates Manager Paid Membership Pro Integration, Affiliates Manager MailChimp Integration, Affiliates Manager and Sell Digital Downloads, Affiliates Manager MailPoet Integration

Questions

Is Affiliates Manager still maintained?

Affiliates Manager was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is Affiliates Manager safe?

Affiliates Manager has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Affiliates Manager?

The wordpress.org author is wp.insider. Recent committers: mra13, affmngr, plugin-master. We have recorded no ownership change.

What can I use instead of Affiliates Manager?

Plugins in the same category with a higher Canary Score: AffiliateWP - Affiliate Area Tabs, Affiliate Area Shortcodes by AffiliateWP, AffiliateWP - Order Details For Affiliates, FluentAffiliate - Affiliate Program Management Suite, Affiliates Manager, AffiliateWP - Affiliate Product Rates.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue