Does AffiliateWP Checkout Referrals have any unpatched vulnerabilities?

No. All known vulnerabilities in AffiliateWP Checkout Referrals have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is AffiliateWP Checkout Referrals compatible with WordPress 6.8.5?

According to WordPress.org data, AffiliateWP Checkout Referrals 1.2.2 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

Is AffiliateWP Checkout Referrals compatible with PHP 7.4+?

AffiliateWP Checkout Referrals requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is AffiliateWP Checkout Referrals updated?

AffiliateWP Checkout Referrals was last updated on Apr 23, 2025. Frequent updates are generally a positive security signal.

What is AffiliateWP Checkout Referrals's security score?

AffiliateWP Checkout Referrals has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

AffiliateWP Checkout Referrals Security & Risk Analysis

wordpress.org/plugins/affiliatewp-checkout-referrals

Allow customers to select who should receive a commission at checkout

600 active installs v1.2.2 PHP 7.4+ WP 5.2+ Updated Apr 23, 2025

affiliateaffiliatewpandrew-munromordaukpippin-williamson

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is AffiliateWP Checkout Referrals Safe to Use in 2026?

Generally Safe

Score 100/100

AffiliateWP Checkout Referrals has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11mo ago

Risk Assessment

The "affiliatewp-checkout-referrals" v1.2.2 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, file operations, or external HTTP requests is a significant positive. The plugin also boasts a clean vulnerability history with no known CVEs. However, the analysis does raise concerns regarding output escaping, with only 59% of identified outputs being properly escaped. This leaves a portion of the plugin's output potentially vulnerable to cross-site scripting (XSS) attacks if user-supplied data is not adequately sanitized before being displayed.

Key Concerns

Incomplete output escaping

Vulnerabilities

None known

AffiliateWP Checkout Referrals Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

AffiliateWP Checkout Referrals Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

13 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

59% escaped22 total outputs

Attack Surface

AffiliateWP Checkout Referrals Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 22

actionplugins_loadedaffiliatewp-checkout-referrals.php:106

actionaffwp_plugins_loadedaffiliatewp-checkout-referrals.php:108

filteraffwp_settings_tabsincludes\class-admin.php:28

filteraffwp_settingsincludes\class-admin.php:29

actionedd_purchase_form_after_cc_formintegrations\class-edd.php:34

actionedd_checkout_error_checksintegrations\class-edd.php:37

actionedd_insert_paymentintegrations\class-edd.php:38

filteraffwp_was_referredintegrations\class-edd.php:54

filteraffwp_get_referring_affiliate_idintegrations\class-edd.php:55

actionrcp_before_registration_submit_fieldintegrations\class-rcp.php:34

actionrcp_before_form_errorsintegrations\class-rcp.php:35

actionrcp_form_processingintegrations\class-rcp.php:36

filteraffwp_was_referredintegrations\class-rcp.php:52

filteraffwp_get_referring_affiliate_idintegrations\class-rcp.php:53

actionwoocommerce_after_order_notesintegrations\class-woocommerce.php:45

actionwoocommerce_checkout_processintegrations\class-woocommerce.php:46

actionwoocommerce_checkout_update_order_metaintegrations\class-woocommerce.php:52

actionwoocommerce_checkout_order_processedintegrations\class-woocommerce.php:56

actionwoocommerce_initintegrations\class-woocommerce.php:64

actionwoocommerce_set_additional_field_valueintegrations\class-woocommerce.php:65

filteraffwp_was_referredintegrations\class-woocommerce.php:203

filteraffwp_get_referring_affiliate_idintegrations\class-woocommerce.php:204

Maintenance & Trust

AffiliateWP Checkout Referrals Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedApr 23, 2025

PHP min version7.4

Downloads22K

Community Trust

Rating60/100

Number of ratings2

Active installs600

Alternatives

AffiliateWP Checkout Referrals Alternatives

AffiliateWP – Affiliate Area Tabs

affiliatewp-affiliate-area-tabs

100

Add and reorder tabs in AffiliateWP's Affiliate Area

4K No CVEs

AffiliateWP – Affiliate Product Rates

affiliatewp-affiliate-product-rates

100

Allows you to set product referral rates on a per-affiliate level in AffiliateWP.

2K No CVEs

AffiliateWP – Order Details For Affiliates

affiliatewp-order-details-for-affiliates

100

Allow affiliates to see order details on referrals they generated

2K No CVEs

AffiliateWP – Affiliate Info

affiliatewp-affiliate-info

100

Display information based on the affiliate's referral URL.

1K No CVEs

AffiliateWP – Affiliate QR Codes

affiliatewp-affiliate-qr-codes

Allows affiliates to save, print, or share their affiliate URL as a QR code.

1K No CVEs

Developer Profile

AffiliateWP Checkout Referrals Developer Profile

Syed Balkhi

94 plugins · 23.5M total installs

trust score

Avg Security Score

91/100

Avg Patch Time

795 days

View full developer profile

Detection Fingerprints

How We Detect AffiliateWP Checkout Referrals

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/affiliatewp-checkout-referrals/assets/css/checkout-referrals.css/wp-content/plugins/affiliatewp-checkout-referrals/assets/js/checkout-referrals.js

Script Paths

/wp-content/plugins/affiliatewp-checkout-referrals/assets/js/checkout-referrals.js

Version Parameters

affiliatewp-checkout-referrals/assets/css/checkout-referrals.css?ver=affiliatewp-checkout-referrals/assets/js/checkout-referrals.js?ver=

HTML / DOM Fingerprints

CSS Classes

affwp-checkout-referrals-fields

JS Globals

affiliatewp_checkout_referrals_params

FAQ