Skip to content
PluginCanary

ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

by Blair Williams · 30,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 3.12.2.

85/ 100 Canary Score
Sub-scores for ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 3.12.2. Update to version 3.12.2 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 3.12.1. Update to version 3.12.1 or later.15 Oct 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
jkohlbach15 Jul 2013 to 15 Nov 2019, 94 commits
supercleanse15 Nov 2019 to 28 Oct 2022, 5 commits
caseproof14 Jan 2020 to 29 Oct 2026, 45 commits
cartpauj13 Jul 2022 to 16 Jan 2024, 4 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
11
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
Q1 20242
Q2 20241
Q3 20240
Q4 20242
Q1 20250
Q2 20252
Q3 20250
Q4 20253
Q1 20261
Q2 20261
Q3 20260
Q4 20262

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <ta> Tag7.2<= 3.12.13.12.20
15 Oct 2026ThirstyAffiliates <= 3.12.0 - Unauthenticated Information Exposure5.3<= 3.12.03.12.10
2 Feb 2026ThirstyAffiliates <= 3.11.9 - Cross-Site Request Forgery4.3<= 3.11.93.11.100
15 Dec 2025ThirstyAffiliates <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.11.83.11.90
10 Apr 2022ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation5.4<= 3.10.43.10.50
10 Apr 2022ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery5.4<= 3.10.43.10.50
22 May 2020ThirstyAffiliates Affiliate Link Manager <= 3.9.2 - Stored Cross-Site Scripting5.4<= 3.9.23.9.31

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
Q4 20235.0
Q1 20244.8
Q2 20244.3
Q3 20244.5
Q1 20253.5
Q2 20253.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20261.0

Average rating fell from 5.0 to 1.0 between Q4 2023 and Q2 2026.

Rating distribution
5 star217
4 star12
3 star2
2 star2
1 star18
Latest low reviews

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
4 May 2026362
11 May 2026730
18 May 2026738
25 May 202611,178
1 Jun 20262,450
8 Jun 20261,850
15 Jun 20261,473
22 Jun 20261,336
29 Jun 20261,298
6 Jul 20262,125
13 Jul 2026994
20 Jul 20261,075
27 Jul 2026953
3 Aug 2026869
10 Aug 2026783
17 Aug 2026994
24 Aug 2026911
31 Aug 2026755
7 Sep 2026687
14 Sep 2026827
21 Sep 2026775
28 Sep 2026781
5 Oct 2026830
12 Oct 202610,680
19 Oct 20264,069
26 Oct 202613,336
2 Nov 2026889

Weekly downloads over the last 4 weeks are 207% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Easy Affiliate LinksScore 91 · 6,000+WP Affiliate DisclosureScore 91 · 1,000+BetterLinks - Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCPScore 90 · 20,000+Lasso Lite - Affiliate Link Manager, URL Shortener & Link TrackingScore 90 · 4,000+Cloak Affiliate Links for WooCommerceScore 90 · 1,000+

Facts

Version3.12.2
AuthorBlair Williams
Added15 Jul 2013
Last updated29 Oct 2026
Active installs30,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsredirects, link shortner, link tracking, affiliate links, Amazon affiliates

Other plugins by this author: Members - Membership & User Role Editor Plugin, PrettyLinks - Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links

Questions

Is ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin still maintained?

ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin safe?

ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin?

The wordpress.org author is Blair Williams. Recent committers: caseproof, cartpauj, supercleanse, jkohlbach, plugin-master. We have recorded no ownership change.

What can I use instead of ThirstyAffiliates - Affiliate Links, Link Branding, Link Tracking & Marketing Plugin?

Plugins in the same category with a higher Canary Score: Easy Affiliate Links, WP Affiliate Disclosure, BetterLinks - Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP, Lasso Lite - Affiliate Link Manager, URL Shortener & Link Tracking, Cloak Affiliate Links for WooCommerce.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue