Coupon Affiliates – Affiliate Plugin for WooCommerce

Vulnerabilities 22Slug woo-coupon-usageLatest version 7.8.0WordPress.org →

Minimum safe version

7.6.0

Update to 7.6.0 or later to address 22 fixable vulnerabilities

Latest available7.8.0 ✓
N/A
2026-04-21< 7.6.0

Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.5.3 - Unauthenticated Stored Cross-Site Scripting

WordfenceCVE
Medium 4.3
2025-09-22< 6.8.1

Coupon Affiliates <= 6.8.0 - Missing Authorization

WordfenceEUVDCVE
Medium 6.1
2025-04-18< 6.3.1

Coupon Affiliates – Affiliate Plugin for WooCommerce <= 6.3.0 - Reflected Cross-Site Scripting via 'commission_summary' Parameter

EUVDWordfenceCVE
Medium 6.3
2024-10-16< 4.16.4

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
N/A
< 4.11.0.2

Coupon Affiliates for WooCommerce &lt; 4.11.0.2 - Reflected Cross-Site Scripting

WPScan
N/A
< 4.11.3.4

Coupon Affiliates for WooCommerce &lt; 4.11.3.4 - Arbitrary Referral Visits Deletion via CSRF

WPScan
N/A
2023-07-18< 5.6.0

WordPress Coupon Affiliates Plugin < 5.6.0 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
N/A
2021-08-24< 4.11.0.2

WooCommerce Affiliate Plugin – Coupon Affiliates <= 4.11.0.1 - Reflected Cross-Site Scripting

Wordfence
N/A
2021-10-11< 4.11.3.4

WooCommerce Affiliate Plugin – Coupon Affiliates < 4.11.3.4 - Cross-Site Request Forgery

Wordfence
N/A
2022-03-04< 4.16.4

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
N/A
2021-08-24< 4.11.0.2

WordPress Coupon Affiliates plugin <= 4.11.0.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A
2022-02-28< 4.16.4.5

WordPress Coupon Affiliates plugin < 4.16.4.5 - Sensitive Information Disclosure vulnerability

Patchstack
N/A
2022-02-28< 4.16.4.5

WordPress Coupon Affiliates plugin < 4.16.4.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack