Affiliates Manager

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 94% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ imrankhattak

   2.8y ago

   its working fine but plz add more features to this plugin

   Read on wp.org ↗
2. ★★★★★ dhovorka

   3.1y ago

   Well, well, well. First, you need to purchase to find out that the complete system is relying on cookies. What a shame, this is not practical, once a user is deleting his browser, referral sales are no longer recorded which is a mess. This makes a NO GO for this plugin at all. Support is also crap, after one message no further interaction.

   Read on wp.org ↗
3. ★★★★★ Marc

   3.3y ago

   I have tried for more than 3 years to have them fix a bug. The plugin is not loading jquery and css when language is other than default. Instead lof looking at how to help a paying customer, they say it’s not core WP feature and refuse to look at it. Pathetic !!Can’t put the link here, but just google this: “uncaught typeerror.datepicker is not a function” “affiliate manager”

   Read on wp.org ↗
4. ★★★★★ asienchris

   3.4y ago

   I initially read some of the other reviews and got discouraged from downloading and trying this plugin. But luckily I did do it in the end because as it turns out, these other reviewers must have either reviewed a very old (and therefore different) version of this plugin, or they expect everything to be served on a golden plate to them. I was able to figure out all the functions of this plugin using their website. And now I have successfully set up my own affiliate program. I have achieved something that I thought was very complicated – thanks to this plugin!

   Read on wp.org ↗
5. ★★★★★ Kenelli

   3.8y ago

   I use this plugin to pay influenceurs who talk about my products since a few years. Easy to set up, I really want to thanks the creator of this plugin.

   Read on wp.org ↗
6. ★★★★★ Luciano Ribeiro

   4.3y ago

   Poor interface. Usability needs improvements.

   Read on wp.org ↗
7. ★★★★★ Jorge Medina

   4.5y ago

   La propuesta esta muy buena, se puede trabajar con todo lo que necesita en el tema de afiliados para productos. Existen dos inconvenientes, los cuales son: 1- El formulario de registro: tanto la casilla de la provincia como la del código postal está anclada a los Estados pertenecientes a Estados Unidos, por lo que es un grave inconveniente para páginas web y clientes fuera de ese país. 2.- La contraseña para el usuario recién registrado (no estoy seguro si es porque trabajé el complemento en el local host). No me llega a mi correo Gmail el registro de mi correo como afiliado, así mismo ocurre con la recuperación de la contraseña.

   Read on wp.org ↗
8. ★★★★★ victoriaregina

   4.5y ago

   For a FREE plugin I have to say we have gotten such GREAT response from the Developer and encouragement to make it work! Appreciate the help and so far the plugin is doing what we need! This topic was modified 4 years, 4 months ago by victoriaregina.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.9.53 Fixed an issue with currency symbol not displaying correctly. 2.9.53
2. — Version 2.9.52 Fixed a notice when the company name is not present. 2.9.52
3. — Version 2.9.51 Fixed an issue related to payout file generation. 2.9.51
4. — Version 2.9.50 Fixed an issue with updating payment details from affiliate profile. 2.9.50
5. — Version 2.9.49 Fixed some PHP 8.4 deprecated notices. 2.9.49
6. — Version 2.9.48 fixed an issue that was indirectly causing the _load_textdomain_just_in_time notice. 2.9.48

16 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 Affiliates Manager <= 2.9.53 - Unauthenticated SQL Injection ↗
   2026-08-18 CVE-2026-73355 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.9.53 Patched in 2.9.54
2. High · 7.2 Affiliates Manager <= 2.9.53 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-18 CVE-2026-73358 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.9.53 Patched in 2.9.54
3. Medium · 4.3 Affiliates Manager <= 2.9.49 - Missing Authorization ↗
   2026-06-26 CVE-2026-57654 Missing Authorization Affects <= 2.9.49 Patched in 2.9.50
4. Medium · 5.3 Affiliates Manager <= 2.9.50 - Unauthenticated Information Exposure ↗
   2026-06-08 CVE-2026-52692 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.9.50 Patched in 2.9.51
5. Medium · 4.3 Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery ↗
   2024-01-30 CVE-2024-0859 Cross-Site Request Forgery (CSRF) Affects <= 2.9.34 Patched in 2.9.35
6. Medium · 6.5 Affiliates Manager <= 2.9.31 - Cross-Site Request Forgery via multiple AJAX actions ↗
   2023-12-28 CVE-2023-52130 Cross-Site Request Forgery (CSRF) Affects <= 2.9.31 Patched in 2.9.32
7. Medium · 5.3 Affiliates Manager <= 2.9.30 - Sensitive Information Exposure via Log File ↗
   2023-12-28 CVE-2023-52148 Insertion of Sensitive Information into Log File Affects <= 2.9.30 Patched in 2.9.31
8. Medium · 4.3 Affiliates Manager <= 2.9.20 - Cross-Site Request Forgery via process_bulk_action() ↗
   2023-03-29 CVE-2023-28986 Cross-Site Request Forgery (CSRF) Affects <= 2.9.20 Patched in 2.9.21
9. Medium · 5.5 Affiliates Manager <= 2.9.13 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2022-08-16 CVE-2022-2799 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.9.13 Patched in 2.9.14
10. Critical · 9.0 Affiliates Manager <= 2.9.13 - CSV Injection ↗
    2022-08-16 CVE-2022-2798 Improper Neutralization of Formula Elements in a CSV File Affects <= 2.9.13 Patched in 2.9.14
11. High · 8.8 Affiliates Manager <= 2.9.13 - Cross-Site Request Forgery ↗
    2022-08-16 Cross-Site Request Forgery (CSRF) Affects <= 2.9.13 Patched in 2.9.14
12. Medium · 6.1 Affiliates Manager <= 2.9.13 - Reflected Cross-Site Scripting ↗
    2022-08-16 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.9.13 Patched in 2.9.14
13. High · 7.2 Affiliates Manager <= 2.8.9 - Unauthenticated Stored Cross-Site Scripting ↗
    2021-12-24 CVE-2021-25078 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.9 Patched in 2.9.0
14. High · 7.2 Affiliate Manager <= 2.8.6 - Admin+ SQL injection ↗
    2021-10-11 CVE-2021-24844 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.8.6 Patched in 2.8.7
15. Medium · 6.1 Affiliates Manager <= 2.7.7 - Cross-Site Scripting ↗
    2020-09-11 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.7.8 Patched in 2.7.8
16. High · 8.8 Affiliates Manager <= 2.6.5 - Cross-Site Request Forgery ↗
    2019-05-26 CVE-2019-15868 Cross-Site Request Forgery (CSRF) Affects < 2.6.6 Patched in 2.6.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 129 languages, 7 at 90% or more

Plus 105 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-10 9K+ → 8K+ down after 162 days in tier
2. 2026-01-29 10K+ → 9K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Affiliate Program Suite — SliceWP Affiliates 10K+ installs · 4.8★ · 3 shared tags A
• AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking 9K+ installs · 4.3★ · 2 shared tags A
• Google for WooCommerce 800K+ installs · 2.8★ · 1 shared tag B
• WooCommerce PayPal Payments 800K+ installs · 2.9★ · 1 shared tag B
• WooCommerce Stripe Payment Gateway 700K+ installs · 3.1★ · 1 shared tag B
• WooCommerce Tax (formerly WooCommerce Shipping & Tax) 500K+ installs · 2.2★ · 1 shared tag C

Embed this report card

Drop a live Pulse card for Affiliates Manager into a readme, a review or a deck. It updates itself.

Affiliates Manager: 8K+ active installs, 4.1★ (61 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/affiliates-manager