Vulnerabilities / Coupon Affiliates – Affiliate Plugin for WooCommerce
Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerabilities
Advisories WPSec published for Coupon Affiliates – Affiliate Plugin for WooCommerce. Other sources may list more. Its attack surface: Coupon Affiliates – Affiliate Plugin for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-24 | WPSEC-2026-1619 | Coupon Affiliates – Affiliate Plugin for WooCommerce <= 8.7.0 - Authenticated (Shop Manager+) Privilege Escalation via Account Takeover | High 7.2 | 8.7.1 |
| 2026-10-24 | WPSEC-2026-1618 | Coupon Affiliates – Affiliate Plugin for WooCommerce <= 8.7.0 - Authenticated (Subscriber+) Affiliate Statistics Manipulation via Statistics Refresh | Medium 4.3 | 8.7.1 |
| 2026-10-24 | WPSEC-2026-1617 | Coupon Affiliates – Affiliate Plugin for WooCommerce <= 8.7.0 - Unauthenticated Missing Authorization to Affiliate Registration | Medium 5.3 | 8.7.1 |
License: CC BY 4.0