[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU22XlVpRP7A4DBWGOLPE7aO-ocuxPzS5YqzyA--lrkA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":77,"crawl_stats":38,"alternatives":84,"analysis":181,"fingerprints":624},"wp-affiliate-disclosure","WP Affiliate Disclosure","1.2.10","mojofywp","https:\u002F\u002Fprofiles.wordpress.org\u002Fmojofywp\u002F","\u003Cp>Live Demo: \u003Ca href=\"https:\u002F\u002Fwww.mojofywp.com\u002Fwp-affiliate-disclosure\u002Fdemo\" title=\"WP Affiliate Disclosure in Action\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.mojofywp.com\u002Fwp-affiliate-disclosure\u002Fdemo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>If you’re an affiliate marketer, blogger, or website owner, and you’re promoting products of companies from US, UK, or Canada, the FTC (Federal Trade Commission) requires you to tell your visitors that you will be compensated if they purchase something through your affiliate link(s).\u003C\u002Fp>\n\u003Cp>However, adding the disclosure statement manually into each posts would be a hassle – But worries no more…\u003C\u002Fp>\n\u003Cp>WP Affiliate Disclosure allows you to add a customizable, FTC-compliant disclosure statement that will automatically display across your WordPress website based on the rule(s) you define.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Main features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Show the disclosure statement at the beginning and\u002For the end of a post.\u003C\u002Fli>\n\u003Cli>Easily customize statement content, including adding in links, images, as well as HTML elements.\u003C\u002Fli>\n\u003Cli>Only show the disclosure statement on certain posts.\u003C\u002Fli>\n\u003Cli>Only show the disclosure statement based on its taxonomies ( categories \u002F tags )\u003C\u002Fli>\n\u003Cli>Works on custom post type as well\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Live Demo: \u003Ca href=\"https:\u002F\u002Fwww.mojofywp.com\u002Fwp-affiliate-disclosure\u002Fdemo\" title=\"WP Affiliate Disclosure in Action\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.mojofywp.com\u002Fwp-affiliate-disclosure\u002Fdemo\u003C\u002Fa>\u003C\u002Fp>\n","Automatically add a customizable, FTC-compliant disclosure statement across your WordPress website based on the rule(s) you define.",1000,33931,100,1,"2025-01-28T08:49:00.000Z","6.7.5","4.9.8","5.6",[20,21,22,23,24],"affiliate","affiliate-disclosure","affiliate-disclosure-statement","disclosure","disclosure-statement","https:\u002F\u002Fwww.mojofywp.com\u002Fwp-affiliate-disclosure","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-affiliate-disclosure.zip",90,3,0,"2023-12-29 00:00:00","2026-03-15T15:16:48.613Z",[33,49,63],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2023-52178","wp-affiliate-disclosure-authenticated-contributor-stored-cross-site-scripting-via-id","WP Affiliate Disclosure \u003C= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via $id","The WP Affiliate Disclosure plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the $id variable in versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.2.7","1.2.8","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5e38ee27-30a4-45be-bab6-a3e65ada215f?source=api-prod",25,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":41,"cvss_score":56,"cvss_vector":57,"vuln_type":58,"published_date":59,"updated_date":45,"references":60,"days_to_patch":62},"CVE-2023-47232","wp-affiliate-disclosure-cross-site-request-forgery-via-checkcapability","WP Affiliate Disclosure \u003C= 1.2.6 - Cross-Site Request Forgery via check_capability","The WP Affiliate Disclosure plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.6. This is due to incorrect nonce validation logic on the check_capability function. This makes it possible for unauthenticated attackers to update plugin options via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=1.2.6","1.2.7",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2023-11-03 00:00:00",[61],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F11cc8c6e-b60e-46b3-966e-07b1fb2bf8e9?source=api-prod",81,{"id":64,"url_slug":65,"title":66,"description":67,"plugin_slug":4,"theme_slug":38,"affected_versions":68,"patched_in_version":69,"severity":70,"cvss_score":71,"cvss_vector":72,"vuln_type":58,"published_date":73,"updated_date":45,"references":74,"days_to_patch":76},"WF-3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0-wp-affiliate-disclosure","freemius-sdk-missing-authorization-to-arbitrary-options-update-128","Freemius SDK \u003C= 2.2.3 - Missing Authorization to Arbitrary Options Update","The Freemius SDK for WordPress is vulnerable to authorization bypass due to a missing capability check on the _get_db_option and _set_db_option functions in versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change site settings and potentially take over the site.","\u003C1.1.4","1.1.4","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","2019-02-25 00:00:00",[75],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0?source=api-prod",1793,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":78,"total_installs":79,"avg_security_score":80,"avg_patch_time_days":81,"trust_score":82,"computed_at":83},2,1300,91,479,73,"2026-04-04T09:52:30.071Z",[85,104,121,140,162],{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":13,"num_ratings":14,"last_updated":95,"tested_up_to":96,"requires_at_least":97,"requires_php":98,"tags":99,"homepage":102,"download_link":103,"security_score":13,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"disclaimify","Disclaimify – Affiliate Disclosure \u002F Disclaimer for WordPress","1.0.0","HasThemes","https:\u002F\u002Fprofiles.wordpress.org\u002Fhasthemes\u002F","\u003Cp>Introducing Disclaimify, an efficient WordPress plugin designed specifically for affiliate marketers, bloggers, and website owners to easily inform their web visitors about potential compensation when purchasing through affiliate links.\u003C\u002Fp>\n\u003Cp>With Disclaimify, you can effortlessly present the disclosure statement across multiple posts simultaneously. Additionally, you have the flexibility to choose specific pages or taxonomies where the disclosure statement should be displayed.\u003C\u002Fp>\n\u003Cp>This affiliate disclosure plugin offers a range of modern and convenient features for displaying the affiliate disclosure statement. You can hide the disclosure on certain pages\u002Fposts\u002Ftaxonomies, prioritize the display of disclosures, or even showcase them using shortcodes anywhere.\u003C\u002Fp>\n\u003Cp>Experience the convenience of Disclaimify as you inform your audience about compensation through affiliate links with ease.\u003C\u002Fp>\n\u003Ch3>Benefits of Using Disclaimify – WordPress Affiliate Disclosure Plugin\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Multiple Options to manage disclosure statements in one place.\u003C\u002Fli>\n\u003Cli>Simple FTC compliance management for your blog postings.\u003C\u002Fli>\n\u003Cli>With Disclaimify, you can effortlessly inform your readers about affiliate links while maintaining transparency and compliance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Plugin Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Display the disclosure at the start and\u002For the end of a post content.\u003C\u002Fli>\n\u003Cli>Show disclosure at post meta start and\u002For end (Blocksy Theme).\u003C\u002Fli>\n\u003Cli>Easily customize disclosure content using Gutenberg Editor.\u003C\u002Fli>\n\u003Cli>Custom Post type support.\u003C\u002Fli>\n\u003Cli>Show Disclosure on all posts or only on certain posts or only on taxonomies (Category \u002F Tags).\u003C\u002Fli>\n\u003Cli>Hide Disclosure only on certain posts or taxonomies (Category \u002F Tags).\u003C\u002Fli>\n\u003Cli>Show Disclosure Based on priority.\u003C\u002Fli>\n\u003Cli>Shortcode supported\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Details of Each Feature about Disclaimify\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Display the disclosure at the start and\u002For the end of a post content:\u003C\u002Fstrong> With Disclaimify, you can easily choose to display the disclosure statement at the beginning and\u002For the end of your post content. This ensures that your audience is informed about affiliate compensation right from the start or after reading the entire post.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Show disclosure at post meta start and\u002For end (Blocksy Theme):\u003C\u002Fstrong> If you are using the Blocksy theme, Disclaimify seamlessly integrates with it, allowing you to display the disclosure statement at the start and\u002For the end of the post meta section. This provides a clear and visible disclosure for your readers.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Easily customize disclosure content using Gutenberg Editor:\u003C\u002Fstrong> Disclaimify makes it effortless to customize the content of your disclosure statement using the Gutenberg Editor. You can easily modify the text, format, and style to match your website’s branding and design.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Custom Post type support:\u003C\u002Fstrong> The plugin offers support for custom post types, ensuring that the disclosure statement can be displayed on different types of posts on your WordPress website. This allows you to maintain transparency across all types of content.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Show Disclosure on all posts or only on certain posts or only on taxonomies (Category \u002F Tags):\u003C\u002Fstrong> Disclaimify provides flexibility in displaying the disclosure statement. You can choose to show it on all posts, select specific posts where it should be displayed, or even restrict it to certain taxonomies such as categories or tags. This allows you to tailor the disclosure to relevant content and target specific sections of your website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Hide Disclosure only on certain posts or taxonomies (Category \u002F Tags):\u003C\u002Fstrong> In addition to showing the disclosure, Disclaimify also allows you to hide the disclosure on specific posts or taxonomies. This can be useful when you want to exclude certain content from having a disclosure statement displayed.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Show Disclosure Based on priority:\u003C\u002Fstrong> If your website has multiple disclosure statements, Disclaimify allows you to set priorities for each one. This ensures that the disclosure statements are displayed in the desired order, providing clear and consistent information to your audience.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Shortcode supported:\u003C\u002Fstrong> Disclaimify supports shortcodes, making it easy to place the disclosure statement anywhere on your WordPress website. You can use shortcodes to display the disclosure in custom areas or even within specific sections of your posts or pages.\u003C\u002Fp>\n","Disclaimify is the ultimate solution to add affiliate disclosure statements & inform your readers about affiliate links while ensuring transparency.",400,2189,"2025-12-02T09:24:00.000Z","6.9.4","5.0","7.4",[20,100,101,23,24],"affiliate-marketing","disclaimer","https:\u002F\u002Fhasthemes.com\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisclaimify.1.0.0.zip",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":11,"downloaded":112,"rating":13,"num_ratings":28,"last_updated":113,"tested_up_to":114,"requires_at_least":115,"requires_php":116,"tags":117,"homepage":118,"download_link":119,"security_score":120,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"fmtc-affiliate-disclosure","FMTC Affiliate Disclosure","2.0.3","fmtc","https:\u002F\u002Fprofiles.wordpress.org\u002Ffmtc\u002F","\u003Cp>The FTC requires that bloggers, affiliates and publishers disclose their relationships with merchant if they earn money\u003Cbr \u002F>\nfrom links within blog posts. This plugin will add a simple FTC-compliant disclosure statement at the beginning of all\u003Cbr \u002F>\nblog posts.\u003C\u002Fp>\n","Add FTC-Compliant Disclosure statement to the beginning of your blog posts",20485,"2022-03-24T19:13:00.000Z","5.9.13","4.6","5.3",[20,23],"https:\u002F\u002Ftoolkit.fmtc.co\u002Fftc-disclosure-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffmtc-affiliate-disclosure.zip",85,{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":129,"downloaded":130,"rating":13,"num_ratings":14,"last_updated":131,"tested_up_to":132,"requires_at_least":133,"requires_php":134,"tags":135,"homepage":137,"download_link":138,"security_score":139,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"affiliate-notice-manager","Affiliate Notice Manager","1.0.1","Drag WP","https:\u002F\u002Fprofiles.wordpress.org\u002Fdragwp\u002F","\u003Cp>Most of the affiliate programs suggest marketers to add affiliate disclosure on their website. It’s always best practice, if you can add the Affiliate Notice or Disclosure below the post.\u003C\u002Fp>\n\u003Cp>To promote products of UK, US or Canada based companies, you must need to add disclosure on your website. Large affiliate programs like Amazon, Ebay, Trip Advisor and others always suggest to follow FTC(Fedaral Trade Commission) guidelines.\u003C\u002Fp>\n\u003Cp>Using this plugin you can easily add affiliate notice on posts. It’s easy and anyone can setup.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>Here are some features of this plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Show Affiliate Notice in Post\u003C\u002Fli>\n\u003Cli>Show Any Notice Below Post\u003C\u002Fli>\n\u003Cli>Display or Turn Off\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin helps to display affiliate disclosure on WordPress Single Posts. It's easy to setup and customize with any latest WordPress Version.",500,2635,"2025-01-26T06:21:00.000Z","6.6.5","6.0","",[20,122,101,23,136],"notice","https:\u002F\u002Fdragwp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faffiliate-notice-manager.1.0.1.zip",92,{"slug":141,"name":142,"version":143,"author":144,"author_profile":145,"description":146,"short_description":147,"active_installs":129,"downloaded":148,"rating":13,"num_ratings":28,"last_updated":149,"tested_up_to":150,"requires_at_least":151,"requires_php":152,"tags":153,"homepage":134,"download_link":159,"security_score":160,"vuln_count":78,"unpatched_count":29,"last_vuln_date":161,"fetched_at":31},"mww-disclaimer-buttons","MWW Disclaimer Buttons","3.5","Jennifer Moss","https:\u002F\u002Fprofiles.wordpress.org\u002Fmossifer\u002F","\u003Cp>For bloggers\u002Fcontent creators that accept free products or compensation for reviews, or use affiliate links, the FTC requires that you put disclosures at the top of any post or page.\u003C\u002Fp>\n\u003Cp>This plugin creates an options box in the POST or PAGE editor for you to add each of these buttons to your post without having to include it in post text.\u003C\u002Fp>\n\u003Cp>[Affiliate Links] – Blogger makes money when someone clicks on link and purchases product from 3rd party vendor.\u003C\u002Fp>\n\u003Cp>[PR Sample] – Free product was received by blogger in exchange for a review and\u002For post.\u003C\u002Fp>\n\u003Cp>[Sponsored] – Blogger was paid directly for the post\u002Fpage.\u003C\u002Fp>\n\u003Cp>The disclaimer buttons appear below the title and above the text on a single post or page–they do not appear on excerpts nor your RSS feed.\u003C\u002Fp>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>Generates disclaimer buttons for bloggers that receive any compensation for reviews, including affiliate links.\u003C\u002Fp>\n\u003Ch3>Markdown\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Admin Page for entering disclaimer URL\u003C\u002Fli>\n\u003Cli>Settings box on post page\u003C\u002Fli>\n\u003Cli>Appends buttons to the_content() (post text) on single post or page only.\u003C\u002Fli>\n\u003C\u002Fol>\n","The FTC requires that you put disclosures at the top of your post if you were compensated in any way (affiliate links, free products, or payment).",13988,"2025-10-08T20:30:00.000Z","6.8.5","4.2","7.0",[154,155,156,157,158],"affiliate-links","disclaimers","disclosures","pr-samples","sponsored-posts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmww-disclaimer-buttons.zip",98,"2025-09-26 00:00:00",{"slug":163,"name":164,"version":165,"author":166,"author_profile":167,"description":168,"short_description":169,"active_installs":170,"downloaded":171,"rating":13,"num_ratings":78,"last_updated":172,"tested_up_to":173,"requires_at_least":174,"requires_php":175,"tags":176,"homepage":134,"download_link":180,"security_score":120,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"disclosure-for-amazon-affiliate","Disclosure for Amazon Affiliate","1.0","Jon Gillham","https:\u002F\u002Fprofiles.wordpress.org\u002Fjonhaver\u002F","\u003Cp>The Disclosure for Amazon Affiliate plugin is the fastest and easiest way to get your Amazon Affiliate site fully compliant with both the:\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>FTC and Amazon required Affiliate Disclosure\u003C\u002Fli>\n\u003Cli>Amazon Trademark disclaimer\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>It places the pre-loaded disclosure text from Amazon in the right locations on your website with the bonus of tagging it so search engines will ignore the disclaimer and rank your content. \u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>More to Amazon Affiliate Requirements than just a disclosure!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>This plugin covers off two of the most important and difficult to execute parts of being compliant with the Amazon Associates program. However, there are other considerations as well which you can see here – Complete Guide on \u003Ca href=\"https:\u002F\u002Fauthoritywebsiteincome.com\u002Faad\u002Fdisclosure\" rel=\"nofollow ugc\">Amazon Associate Site requirements\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Benefits of the Amazon Associate Disclosure Plugin\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>ONE – Simple Fast and No Setting Changes Required\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>It is\u003Cstrong> \u003C\u002Fstrong>rare that you can use a tool that achieves everything you need it to with so little effort on your end. \u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>With this plugin in seconds you can have a compliant disclosure properly setup on your site. Simply…\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install\u003C\u002Fli>\n\u003Cli>Activate\u003C\u002Fli>\n\u003Cli>Done – You are compliant\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>TWO – Proper Google On Off Tags\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>Many people have recently and correctly moved their affiliate disclosure to the top of their articles. This affiliate disclosure text is incorrectly now being picked up by Google as the page description. This is a large problem for both search rankings and click through rate. \u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>The solution is that using this plugin the Google Off \u002F On tags are properly placed so that the disclosure text will be ignored by Google and your great content will be why they rank your page. \u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>THREE – Fully Editable Text and Customizable Appearance\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>Although it is not needed and comes installed following your sites design with the text provided by Amazon you can both…\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Change the text to add additional disclosures or modify the words however you see fit\u003C\u002Fli>\n\u003Cli>Fully customize the section however you see fit  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>FOUR – Control Globally or on the Page\u002FPost Level\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>Not every one of your posts\u002Fpages likely need the disclosure and you may not want them on every website. \u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>You can easily and efficiently control which of the posts & pages see the disclosure text blocks. \u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>Both global and local level controls are available.\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What Else Is Needed to Stay Compliant With Amazon?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>This plugin is the fastest most efficient way at getting compliant without impacting your SEO with 2 of Amazons requirements…\u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Affiliate Disclosure\u003C\u002Fli>\n\u003Cli>Trademark Disclaimer\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>However there are many other requirements that the Amazon Associate program requires of a site. To get a complete list checkout this free \u003Ca href=\"https:\u002F\u002Fauthoritywebsiteincome.com\u002Faad\u002Fdisclosure\" rel=\"nofollow ugc\">Amazon Affiliate requirements guide\u003C\u002Fa>. \u003C\u002Fp>\n\u003Cp>\u003C\u002Fp>\n\u003Cp>Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates.\u003C\u002Fp>\n","The fastest way to help your site be compliant with Amazon Associates \u002F FTC affiliate and Amazon trademark disclosures",300,6987,"2020-03-22T01:56:00.000Z","5.3.21","3.9.1","5.2.6",[20,177,178,23,179],"amazon-affiliate","associates","ftc","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisclosure-for-amazon-affiliate.zip",{"attackSurface":182,"codeSignals":270,"taintFlows":577,"riskAssessment":612,"analyzedAt":623},{"hooks":183,"ajaxHandlers":228,"restRoutes":261,"shortcodes":262,"cronEvents":267,"entryPointCount":268,"unprotectedCount":269},[184,189,195,199,205,210,214,219,223],{"type":185,"name":186,"callback":187,"priority":14,"file":188,"line":82},"action","init","register_wpadc","builder\\builder\\controller.php",{"type":190,"name":191,"callback":192,"priority":193,"file":188,"line":194},"filter","the_content","add_statement_before_post",5,79,{"type":190,"name":191,"callback":196,"priority":197,"file":188,"line":198},"add_statement_after_post",8,80,{"type":185,"name":200,"callback":201,"priority":202,"file":203,"line":204},"admin_menu","add_settings_page",15,"builder\\settings-page\\controller.php",71,{"type":185,"name":206,"callback":207,"file":208,"line":209},"plugins_loaded","wp_affiliate_disclosure_init","functions.php",89,{"type":185,"name":186,"callback":211,"priority":29,"file":212,"line":213},"includes","includes\\class-wp-affiliate-disclosure.php",160,{"type":185,"name":215,"callback":216,"priority":217,"file":212,"line":218},"wp_enqueue_scripts","register_css",49,162,{"type":185,"name":220,"callback":221,"priority":217,"file":212,"line":222},"admin_enqueue_scripts","register_backend_scripts",163,{"type":185,"name":200,"callback":224,"priority":225,"file":226,"line":227},"wpadc_add_help_page",20,"includes\\help.php",32,[229,234,239,243,246,250,254,257,259],{"action":230,"nopriv":231,"callback":232,"hasNonce":231,"hasCapCheck":231,"file":203,"line":233},"wpadcb-add-new",false,"add_new",74,{"action":235,"nopriv":231,"callback":236,"hasNonce":237,"hasCapCheck":231,"file":203,"line":238},"wpadcb-create-new","create_new",true,75,{"action":240,"nopriv":231,"callback":241,"hasNonce":231,"hasCapCheck":231,"file":203,"line":242},"wpadcb-delete-item","delete_item",78,{"action":244,"nopriv":231,"callback":245,"hasNonce":231,"hasCapCheck":231,"file":203,"line":62},"wpadcb-update-overview","update_overview",{"action":247,"nopriv":231,"callback":248,"hasNonce":237,"hasCapCheck":231,"file":203,"line":249},"wpadcb-update-settings","update_settings",84,{"action":251,"nopriv":231,"callback":252,"hasNonce":231,"hasCapCheck":231,"file":203,"line":253},"wpadcb-startw-submit","trigger_wizard_action",87,{"action":255,"nopriv":231,"callback":252,"hasNonce":231,"hasCapCheck":231,"file":203,"line":256},"wpadcb-startw-back",88,{"action":258,"nopriv":231,"callback":252,"hasNonce":231,"hasCapCheck":231,"file":203,"line":209},"wpadcb-startw-close",{"action":260,"nopriv":231,"callback":252,"hasNonce":231,"hasCapCheck":231,"file":203,"line":27},"wpadcb-startw-reset",[],[263],{"tag":264,"callback":265,"file":188,"line":266},"wpadc","wpadc_sc",76,[],10,7,{"dangerousFunctions":271,"sqlUsage":272,"outputEscaping":274,"fileOperations":29,"externalRequests":29,"nonceChecks":269,"capabilityChecks":78,"bundledLibraries":573},[],{"prepared":29,"raw":29,"locations":273},[],{"escaped":275,"rawEcho":276,"locations":277},36,167,[278,281,284,286,288,290,292,294,296,298,300,302,304,306,308,310,312,315,316,318,320,322,324,326,328,330,332,334,335,336,337,339,340,342,344,346,348,350,352,354,355,357,359,360,362,363,364,365,367,369,371,373,375,376,378,380,382,384,386,387,389,391,393,395,397,399,401,403,405,407,409,411,412,414,416,418,420,422,424,426,428,430,432,434,435,437,439,440,442,444,446,448,451,453,454,456,459,460,461,463,466,468,470,471,473,474,475,476,478,480,482,484,485,487,489,491,493,494,496,497,499,501,503,505,507,510,512,514,515,517,519,521,523,525,526,528,529,531,532,533,535,536,537,538,539,540,541,542,543,545,546,547,548,550,551,554,556,557,558,560,562,563,565,567,568,570,571],{"file":188,"line":279,"context":280},99,"raw output",{"file":282,"line":283,"context":280},"builder\\builder\\view.php",55,{"file":203,"line":285,"context":280},154,{"file":203,"line":287,"context":280},158,{"file":203,"line":289,"context":280},165,{"file":203,"line":291,"context":280},171,{"file":203,"line":293,"context":280},177,{"file":203,"line":295,"context":280},185,{"file":203,"line":297,"context":280},192,{"file":203,"line":299,"context":280},196,{"file":203,"line":301,"context":280},220,{"file":203,"line":303,"context":280},284,{"file":203,"line":305,"context":280},320,{"file":203,"line":307,"context":280},349,{"file":203,"line":309,"context":280},365,{"file":203,"line":311,"context":280},422,{"file":313,"line":314,"context":280},"builder\\settings-page\\view.php",67,{"file":313,"line":204,"context":280},{"file":313,"line":317,"context":280},107,{"file":313,"line":319,"context":280},109,{"file":313,"line":321,"context":280},112,{"file":313,"line":323,"context":280},113,{"file":313,"line":325,"context":280},114,{"file":313,"line":327,"context":280},150,{"file":313,"line":329,"context":280},152,{"file":313,"line":331,"context":280},164,{"file":313,"line":333,"context":280},193,{"file":313,"line":333,"context":280},{"file":313,"line":333,"context":280},{"file":313,"line":333,"context":280},{"file":313,"line":338,"context":280},397,{"file":313,"line":93,"context":280},{"file":313,"line":341,"context":280},404,{"file":313,"line":343,"context":280},406,{"file":313,"line":345,"context":280},407,{"file":313,"line":347,"context":280},437,{"file":313,"line":349,"context":280},440,{"file":351,"line":48,"context":280},"builder\\settings-page\\views\\form.php",{"file":351,"line":353,"context":280},30,{"file":351,"line":227,"context":280},{"file":351,"line":356,"context":280},61,{"file":351,"line":358,"context":280},69,{"file":351,"line":233,"context":280},{"file":351,"line":361,"context":280},82,{"file":351,"line":253,"context":280},{"file":351,"line":321,"context":280},{"file":351,"line":325,"context":280},{"file":351,"line":366,"context":280},133,{"file":351,"line":368,"context":280},144,{"file":351,"line":370,"context":280},146,{"file":351,"line":372,"context":280},148,{"file":351,"line":374,"context":280},156,{"file":351,"line":287,"context":280},{"file":351,"line":377,"context":280},166,{"file":351,"line":379,"context":280},174,{"file":351,"line":381,"context":280},179,{"file":351,"line":383,"context":280},184,{"file":351,"line":385,"context":280},190,{"file":351,"line":297,"context":280},{"file":351,"line":388,"context":280},197,{"file":351,"line":390,"context":280},200,{"file":351,"line":392,"context":280},205,{"file":351,"line":394,"context":280},209,{"file":351,"line":396,"context":280},223,{"file":351,"line":398,"context":280},232,{"file":351,"line":400,"context":280},235,{"file":351,"line":402,"context":280},240,{"file":351,"line":404,"context":280},244,{"file":351,"line":406,"context":280},258,{"file":351,"line":408,"context":280},271,{"file":351,"line":410,"context":280},279,{"file":351,"line":303,"context":280},{"file":351,"line":413,"context":280},289,{"file":351,"line":415,"context":280},295,{"file":351,"line":417,"context":280},297,{"file":351,"line":419,"context":280},302,{"file":351,"line":421,"context":280},305,{"file":351,"line":423,"context":280},310,{"file":351,"line":425,"context":280},314,{"file":351,"line":427,"context":280},328,{"file":351,"line":429,"context":280},337,{"file":351,"line":431,"context":280},340,{"file":351,"line":433,"context":280},345,{"file":351,"line":307,"context":280},{"file":351,"line":436,"context":280},363,{"file":351,"line":438,"context":280},376,{"file":351,"line":93,"context":280},{"file":351,"line":441,"context":280},402,{"file":351,"line":443,"context":280},420,{"file":351,"line":445,"context":280},425,{"file":351,"line":447,"context":280},427,{"file":449,"line":450,"context":280},"builder\\start-wizard\\controller.php",86,{"file":449,"line":452,"context":280},143,{"file":449,"line":276,"context":280},{"file":449,"line":455,"context":280},186,{"file":457,"line":458,"context":280},"builder\\start-wizard\\view.php",59,{"file":457,"line":204,"context":280},{"file":457,"line":317,"context":280},{"file":457,"line":462,"context":280},108,{"file":464,"line":465,"context":280},"builder\\start-wizard\\views\\step_1.php",13,{"file":464,"line":467,"context":280},16,{"file":464,"line":469,"context":280},22,{"file":464,"line":353,"context":280},{"file":472,"line":465,"context":280},"builder\\start-wizard\\views\\step_2.php",{"file":472,"line":467,"context":280},{"file":472,"line":469,"context":280},{"file":472,"line":469,"context":280},{"file":472,"line":477,"context":280},26,{"file":472,"line":479,"context":280},34,{"file":472,"line":481,"context":280},35,{"file":483,"line":465,"context":280},"builder\\start-wizard\\views\\step_3.php",{"file":483,"line":467,"context":280},{"file":483,"line":486,"context":280},31,{"file":483,"line":488,"context":280},39,{"file":483,"line":490,"context":280},40,{"file":492,"line":202,"context":280},"builder\\start-wizard\\views\\step_4.php",{"file":492,"line":225,"context":280},{"file":492,"line":495,"context":280},29,{"file":492,"line":479,"context":280},{"file":492,"line":498,"context":280},45,{"file":492,"line":500,"context":280},47,{"file":492,"line":502,"context":280},53,{"file":492,"line":504,"context":280},63,{"file":492,"line":506,"context":280},66,{"file":508,"line":509,"context":280},"builder\\start-wizard\\views\\step_5.php",19,{"file":508,"line":511,"context":280},24,{"file":508,"line":513,"context":280},38,{"file":508,"line":490,"context":280},{"file":508,"line":516,"context":280},42,{"file":508,"line":518,"context":280},50,{"file":508,"line":520,"context":280},52,{"file":508,"line":522,"context":280},60,{"file":508,"line":524,"context":280},70,{"file":508,"line":82,"context":280},{"file":527,"line":465,"context":280},"builder\\start-wizard\\views\\step_6.php",{"file":527,"line":467,"context":280},{"file":527,"line":530,"context":280},23,{"file":527,"line":511,"context":280},{"file":527,"line":48,"context":280},{"file":527,"line":534,"context":280},27,{"file":527,"line":534,"context":280},{"file":527,"line":353,"context":280},{"file":527,"line":486,"context":280},{"file":527,"line":227,"context":280},{"file":527,"line":227,"context":280},{"file":527,"line":516,"context":280},{"file":527,"line":217,"context":280},{"file":527,"line":518,"context":280},{"file":527,"line":544,"context":280},51,{"file":527,"line":544,"context":280},{"file":527,"line":356,"context":280},{"file":527,"line":358,"context":280},{"file":527,"line":549,"context":280},77,{"file":527,"line":242,"context":280},{"file":552,"line":553,"context":280},"includes\\help\\free_version.php",14,{"file":552,"line":555,"context":280},17,{"file":552,"line":225,"context":280},{"file":552,"line":530,"context":280},{"file":552,"line":559,"context":280},33,{"file":552,"line":561,"context":280},37,{"file":552,"line":516,"context":280},{"file":552,"line":564,"context":280},54,{"file":552,"line":566,"context":280},62,{"file":552,"line":524,"context":280},{"file":226,"line":569,"context":280},58,{"file":226,"line":314,"context":280},{"file":226,"line":572,"context":280},134,[574],{"name":575,"version":165,"knownCves":576},"Freemius",[],[578,594,603],{"entryPoint":579,"graph":580,"unsanitizedCount":29,"severity":593},"create_new (builder\\settings-page\\controller.php:232)",{"nodes":581,"edges":591},[582,586],{"id":583,"type":584,"label":585,"file":203,"line":402},"n0","source","$_POST",{"id":587,"type":588,"label":589,"file":203,"line":303,"wp_function":590},"n1","sink","echo() [XSS]","echo",[592],{"from":583,"to":587,"sanitized":237},"low",{"entryPoint":595,"graph":596,"unsanitizedCount":29,"severity":593},"update_settings (builder\\settings-page\\controller.php:296)",{"nodes":597,"edges":601},[598,600],{"id":583,"type":584,"label":585,"file":203,"line":599},303,{"id":587,"type":588,"label":589,"file":203,"line":305,"wp_function":590},[602],{"from":583,"to":587,"sanitized":237},{"entryPoint":604,"graph":605,"unsanitizedCount":29,"severity":593},"\u003Ccontroller> (builder\\settings-page\\controller.php:0)",{"nodes":606,"edges":610},[607,609],{"id":583,"type":584,"label":608,"file":203,"line":402},"$_POST (x2)",{"id":587,"type":588,"label":589,"file":203,"line":303,"wp_function":590},[611],{"from":583,"to":587,"sanitized":237},{"summary":613,"deductions":614},"The \"wp-affiliate-disclosure\" v1.2.10 plugin exhibits a mixed security posture. While it demonstrates good practices in areas like SQL query handling and the absence of dangerous functions, significant concerns arise from its attack surface and output sanitization.  A large number of AJAX handlers (7 out of 9) lack authentication checks, presenting a substantial entry point for unauthorized actions. Furthermore, only 18% of its output is properly escaped, indicating a high potential for Cross-Site Scripting (XSS) vulnerabilities, especially given the plugin's vulnerability history which includes XSS and missing authorization.\n\nThe plugin's past CVEs, specifically the presence of high and medium severity vulnerabilities related to XSS and authorization issues, are concerning. Although there are currently no unpatched CVEs, the historical pattern suggests a recurring weakness in handling user input and access control. The presence of a bundled Freemius library also warrants attention, as outdated versions of such components can introduce vulnerabilities.  Overall, the plugin has strengths in its database interaction but is significantly weakened by its broad, unprotected attack surface and insufficient output sanitization, making it a moderate risk.",[615,617,619,621],{"reason":616,"points":269},"AJAX handlers without auth checks",{"reason":618,"points":197},"Low percentage of properly escaped output",{"reason":620,"points":28},"Bundled outdated library (Freemius v1.0)",{"reason":622,"points":202},"Past high severity CVEs (1 high, 2 medium)","2026-03-16T18:45:07.521Z",{"wat":625,"direct":634},{"assetPaths":626,"generatorPatterns":629,"scriptPaths":630,"versionParams":631},[627,628],"\u002Fwp-content\u002Fplugins\u002Fwp-affiliate-disclosure\u002Fassets\u002Fcss\u002Fcore.css","\u002Fwp-content\u002Fplugins\u002Fwp-affiliate-disclosure\u002Fassets\u002Fcss\u002Ffont-awesome.min.css",[],[],[632,633],"wp-affiliate-disclosure\u002Fassets\u002Fcss\u002Fcore.css?ver=","wp-affiliate-disclosure\u002Fassets\u002Fcss\u002Ffont-awesome.min.css?ver=",{"cssClasses":635,"htmlComments":638,"htmlAttributes":639,"restEndpoints":641,"jsGlobals":642,"shortcodeOutput":644},[636,637],"wpadc-toggle","wpadc-affiliate-disclaimer",[],[640],"data-wpadc-color",[],[643],"WPAffiliateDisclosure",[]]