WordPress plugin

Coupon Affiliates – Affiliate Plugin for WooCommerce security & vulnerabilities

Q: Does Coupon Affiliates – Affiliate Plugin for WooCommerce have known vulnerabilities?

Yes. VulnCrest Radar lists 17 known vulnerabilities in Coupon Affiliates – Affiliate Plugin for WooCommerce: 4 high, 13 medium. At least one is not fixed in the latest version.

Q: How do I check which version of Coupon Affiliates – Affiliate Plugin for WooCommerce I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerability?

CVE-2026-49068, published Jun 9, 2026: Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.8.1 - Authenticated (Subscriber+) Information Exposure. Severity: Medium (CVSS 4.3).

Q: Is any Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerability listed in CISA KEV?

No. None of the known Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.

woo-coupon-usage— active installsLast vulnerability Jun 9, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

17Known vulnerabilities

Critical0
High4
Medium13
Low0

Vulnerabilities per year

All Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerabilities

Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting ≤7.5.3Update to 7.6.0	CVE-2026-40770	Apr 21
High7.2	Unauthenticated Stored Cross-Site Scripting ≤5.4.3Update to 5.4.4	CVE-2023-28992	Mar 31, 2023
High7.2	Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting <4.16.4.5Update to 4.16.4.5	CVE-2022-0818	Mar 2, 2022
High8.8	Cross-Site Request Forgery <4.11.3.4Update to 4.11.3.4	—	Oct 11, 2021

High7.2
Unauthenticated Stored Cross-Site Scripting
≤7.5.3Update to 7.6.0
CVE-2026-40770Apr 21
High7.2
Unauthenticated Stored Cross-Site Scripting
≤5.4.3Update to 5.4.4
CVE-2023-28992Mar 31, 2023
High7.2
Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
<4.16.4.5Update to 4.16.4.5
CVE-2022-0818Mar 2, 2022
High8.8
Cross-Site Request Forgery
<4.11.3.4Update to 4.11.3.4
2657aa8a-b2de-4cb4-b9f8-e7fb0c887a7aOct 11, 2021

Coupon Affiliates – Affiliate Plugin for WooCommerce: common questions

Does Coupon Affiliates – Affiliate Plugin for WooCommerce have known vulnerabilities?

Yes. VulnCrest Radar lists 17 known vulnerabilities in Coupon Affiliates – Affiliate Plugin for WooCommerce: 4 high, 13 medium. At least one is not fixed in the latest version.

How do I check which version of Coupon Affiliates – Affiliate Plugin for WooCommerce I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerability?

CVE-2026-49068, published Jun 9, 2026: Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.8.1 - Authenticated (Subscriber+) Information Exposure. Severity: Medium (CVSS 4.3).

Is any Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerability listed in CISA KEV?

No. None of the known Coupon Affiliates – Affiliate Plugin for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.