Skip to content
PluginCanary

Auto Affiliate Links

by Lucian Apostol · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: downloads in the last 4 weeks are down more than half vs the 26-week average.

86/ 100 Canary Score
Sub-scores for Auto Affiliate Links
Ownership100
Maintenance100
Security85
Support70
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
thedark14 Jan 2011 to 2 Oct 2026, 822 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
32 days ago
Releases, 24 months
98
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for Auto Affiliate Links
Q1 20244
Q2 20241
Q3 20241
Q4 20243
Q1 20255
Q2 202512
Q3 202510
Q4 20258
Q1 202620
Q2 202612
Q3 202629
Q4 20261

Last release 2 Oct 2026. Tested with WordPress 7.1 (current).

Support

50% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
25 May 2026Auto Affiliate Links <= 6.8.8.3 - Missing Authorization5.3<= 6.8.8.36.8.93
7 May 2026Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter7.2<= 6.8.86.8.8.10
18 Sep 2024Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection4.9<= 6.4.66.4.725
6 May 2024Auto Affiliate Links <= 6.4.3.1 - Authenticated (Editor+) SQL Injection9.1<= 6.4.3.16.4.40
11 Mar 2024Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink4.3<= 6.4.36.4.3.10
9 Jan 2024Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery5.8<= 6.4.2.76.4.2.80
20 Nov 2023Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery4.3<= 6.4.2.56.4.2.60
7 Nov 2023Auto Affiliate Links <= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1<= 6.4.2.46.4.2.53
22 Feb 2023Auto Affiliate Links <= 6.3.0.2 - Cross-Site Request Forgery via aalChangeOptions function4.3<= 6.3.0.26.3.0.30
6 Feb 2023Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change5.4<= 6.2.1.56.2.1.60
2 Feb 2023Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function4.3<= 6.36.3.0.10
15 Jul 2015Auto Affiliate Links < 5.0 - SQL Injection9.8< 5.05.05

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.1 from 39 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star26
4 star4
3 star1
2 star2
1 star6

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Auto Affiliate Links
4 May 2026763
11 May 20263,875
18 May 2026477
25 May 20263,859
1 Jun 2026478
8 Jun 20262,136
15 Jun 2026382
22 Jun 2026263
29 Jun 2026230
6 Jul 2026543
13 Jul 20265,305
20 Jul 20262,270
27 Jul 2026420
3 Aug 20261,167
10 Aug 20269,143
17 Aug 202610,085
24 Aug 20264,290
31 Aug 20267,540
7 Sep 20263,805
14 Sep 2026722
21 Sep 2026489
28 Sep 20261,974
5 Oct 2026800
12 Oct 2026450
19 Oct 2026532
26 Oct 2026515
2 Nov 202699

Weekly downloads over the last 4 weeks are 83% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Easy Affiliate LinksScore 91 · 6,000+WP Affiliate DisclosureScore 91 · 1,000+BetterLinks - Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCPScore 90 · 20,000+Lasso Lite - Affiliate Link Manager, URL Shortener & Link TrackingScore 90 · 4,000+Cloak Affiliate Links for WooCommerceScore 90 · 1,000+

Facts

Version6.9.9.1
AuthorLucian Apostol
Added14 Jan 2011
Last updated2 Oct 2026
Active installs2,000+
Requires WordPress3.5
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagslinks, posts, keywords, affiliate, marketing

Other plugins by this author: Ipgp User Country Flag, IPGP Geolocation, Calotor Calorie Counter, FS Revenue Maximizer, Baseter body mass index calculator, Ipgp ip address lookup, Tampile temperature converter

Questions

Is Auto Affiliate Links still maintained?

Auto Affiliate Links was last updated on 2 Oct 2026. Its Canary status is Healthy.

Is Auto Affiliate Links safe?

Auto Affiliate Links has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Auto Affiliate Links?

The wordpress.org author is Lucian Apostol. Recent committers: thedark, plugin-master. We have recorded no ownership change.

What can I use instead of Auto Affiliate Links?

Plugins in the same category with a higher Canary Score: Easy Affiliate Links, WP Affiliate Disclosure, BetterLinks - Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP, Lasso Lite - Affiliate Link Manager, URL Shortener & Link Tracking, Cloak Affiliate Links for WooCommerce.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue