WC Affiliate - WooCommerce Affiliate Plugin
Limited data: WC Affiliate - WooCommerce Affiliate Plugin has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 75 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| codexpert | 2 Nov 2026 to 2 Nov 2026, 1 commits |
|---|
New committer codexpert made a first commit on 2 Nov 2026.
Maintenance
- Last release
- 2 days ago
- Releases, 24 months
- 1
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 1 |
Last release 2 Nov 2026. Tested with WordPress 7.1 (current).
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 May 2025 | WC Affiliate <= 2.16 - Authenticated (Subscriber+) PHP Object Injection | 8.8 | <= 2.16 | 2.17 | n/a |
| 14 Mar 2025 | WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all | 6.5 | <= 2.5.3 | 2.6 | n/a |
| 25 Jan 2025 | WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting | 6.1 | <= 2.4 | 2.5 | n/a |
| 6 Jan 2025 | WC Affiliate <= 2.3 - Reflected Cross-Site Scripting | 6.1 | <= 2.3 | 2.4 | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.6 from 17 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 15 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 1 |
Momentum
300+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 3.9.5 |
|---|---|
| Author | Codexpert, Inc |
| Added | 22 Jun 2021 |
| Last updated | 2 Nov 2026 |
| Active installs | 300+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | not stated |
| Tags | referral tracking, affiliate marketing, woocommerce affiliate, Affiliates for WooCommerce, woocommerce affiliate plugin |
Other plugins by this author: ThumbPress - Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More, CoDesigner - All in One Elementor WooCommerce Builder, Duplica - Duplicate Posts, Pages, Custom Posts or Users, CF7 Submissions - Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more, Restrict Elementor Widgets, Columns and Sections, Target _blank - Force links to open in a new tab, CoSchool LMS - A complete Learning Management System to Create and Sell Your Courses Online, 2Checkout Integration for WordPress - WP Super Pay
Questions
Is WC Affiliate - WooCommerce Affiliate Plugin still maintained?
WC Affiliate - WooCommerce Affiliate Plugin was last updated on 2 Nov 2026. Its Canary status is Limited data.
Is WC Affiliate - WooCommerce Affiliate Plugin safe?
WC Affiliate - WooCommerce Affiliate Plugin has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Limited data.
Who owns WC Affiliate - WooCommerce Affiliate Plugin?
The wordpress.org author is Codexpert, Inc. Recent committers: codexpert. New committer codexpert made a first commit on 2 Nov 2026.
What can I use instead of WC Affiliate - WooCommerce Affiliate Plugin?
We have no healthier plugin in the same category on record yet.