WP Manifestindependent plugin directory
manifest / ecommerce / custom-affiliate-system

Custom Affiliate System WP Registry grade D+. High-severity findings · 2 findingsWP RegistryHigh-severity findings · 2 findingsOpen the reportD+

Affiliate System for wordpress

★ 1stars
v2.2.2latest · 10mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jrg-code/custom-affiliate-system/archive/refs/heads/main.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Plugin-Affiliate-System

Affiliate System for wordpress

Custom Affiliate System v1.0.8

Complete WordPress affiliate management system with configurable tiers, commission tracking, and automated payouts.

🎯 What's New in v1.0.8

⚙️ Dynamic Settings System

  • Configurable Tiers: Manage commission rates, payout minimums, and payment timelines from WordPress admin
  • No Code Required: All settings adjustable through intuitive admin interface
  • Auto-Update: Changes instantly apply to all existing affiliates and coupons

📧 Email Communication System

  • Mass Emails: Send announcements to all affiliates or specific tiers
  • Personalization: Auto-include affiliate codes, tier info, and commission rates
  • Professional Templates: Beautiful HTML email templates with your branding

🐛 Debug System (Optional)

  • Troubleshooting: Enable debug mode to track all affiliate actions
  • Activity Log: View detailed logs of registrations, commissions, and payouts
  • Performance: Disable when not needed to maintain optimal speed

🎨 Enhanced Admin UI

  • Modern gradient designs and intuitive layouts
  • Real-time validation and helpful descriptions
  • Mobile-responsive admin pages

📦 Features

Tier Management

  • Tier I (Basic): 10% commission, 20€ minimum payout, 30-day processing
  • Tier II (Influencer): 15% commission, no minimum, 3-day processing
  • Ambassador: 20% commission, no minimum, 3-day processing

Automated Systems

  • Auto-generate unique affiliate codes on user registration
  • Auto-create WooCommerce coupons with configurable discounts
  • Track commissions automatically on order completion
  • Email notifications for affiliates and admins

Dashboard Features

  • Modern influencer dashboard in WooCommerce My Account
  • Real-time commission tracking
  • Payout request system with multiple payment methods
  • Sales history and performance metrics

🔧 Requirements

  • WordPress 5.8+
  • WooCommerce 5.0+
  • PHP 7.4+

📖 Quick Start

  1. Install and activate plugin
  2. Go to Affiliates → Settings
  3. Configure commission rates and payment terms
  4. Set support email for notifications
  5. Done! New user registrations auto-create affiliates

⚙️ Configuration

Basic Setup

Navigate to Affiliates → Settings to configure:

  • Commission Rates: Set percentage per tier (0-100%)
  • Minimum Payouts: Set minimum withdrawal amounts
  • Payment Timeline: Days to process approved payouts
  • Coupon Discounts: Customer discount when using affiliate codes
  • Currency Symbol: € $ £ etc.
  • Support Email: Where payout requests are sent
  • Auto-Approve: Enable/disable automatic affiliate approval

Email System

Use Affiliates → Email Affiliates to:

  • Send updates to all affiliates or specific tiers
  • Include personalized tier information
  • Track sent/failed emails

Debug Mode

Enable in Settings to:

  • Track all affiliate system actions
  • View detailed logs in Affiliates → Debug Log
  • Troubleshoot commission tracking issues
  • Remember to disable after troubleshooting

📊 Admin Pages

  • Overview: View all affiliates, stats, upgrade tiers
  • Payouts: Manage withdrawal requests, approve payments
  • Reports: Analytics, top performers, export data
  • Settings: Configure all system parameters
  • Email Affiliates: Send mass communications
  • Debug Log: View system activity (when debug enabled)

🔐 Security

  • Nonce verification on all forms
  • Sanitized inputs and escaped outputs
  • Role-based access control (manage_options capability)
  • SQL injection prevention with prepared statements

🆘 Support

For issues or questions:

  • Check debug logs if debug mode is enabled
  • Verify WooCommerce is active
  • Ensure SMTP is configured for emails
  • GitHub: Report Issue

📝 Changelog

v1.0.8 (2025-11-02)

  • ✨ Added dynamic settings system
  • 📧 Added mass email system for affiliates
  • 🐛 Added optional debug logging system
  • 🎨 Enhanced admin UI with modern design
  • 🔧 All tier settings now configurable from admin
  • 🌍 All admin text in English
  • 🚀 Performance improvements

v1.0.7

  • Fixed coupon usage restrictions
  • Added payout request notifications
  • Improved dashboard UI

📄 License

This plugin is licensed under [Your License Here]

👨‍💻 Author

José Godinho - The Couples Brand


⭐ If this plugin helps your business, consider leaving a star on GitHub!

Releases

Newest 25 of 34 recorded releases.

Tag
Published
v2.2.2 latest
Dec 11, 2025 10mo ago
Dec 2, 2025 10mo ago
Dec 1, 2025 10mo ago
Dec 1, 2025 10mo ago
Dec 1, 2025 10mo ago
Nov 13, 2025 11mo ago
Nov 13, 2025 11mo ago
Nov 13, 2025 11mo ago
Nov 13, 2025 11mo ago
Nov 13, 2025 11mo ago
Nov 13, 2025 11mo ago
Nov 13, 2025 11mo ago
Nov 12, 2025 11mo ago
Nov 11, 2025 11mo ago
Nov 11, 2025 11mo ago
Nov 4, 2025 11mo ago
Nov 4, 2025 11mo ago
Nov 4, 2025 11mo ago
Nov 4, 2025 11mo ago
Nov 4, 2025 11mo ago
Nov 3, 2025 11mo ago
Nov 3, 2025 11mo ago
Nov 2, 2025 11mo ago
Nov 2, 2025 11mo ago
Nov 2, 2025 11mo ago
All releases on GitHub →

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

Custom Affiliate System 2.2.2 · audited by WP Registry

High-severity findings.

1 high 1 medium
Audited release
2.2.2
Findings
2
Worst severity
high
Content hash
f92586ac1385485570d8c6f4…

Findings

  • high export_data dumps all affiliate PII without auth

    information_disclosure

    wp_ajax_export_affiliate_data streams a CSV of all affiliates including emails, codes, commissions, and status with no capability or nonce check. Any authenticated user can exfiltrate the full affiliate roster.

    custom-affiliate-system.php:1821-1854

    Recommendation

    Require manage_options and a valid nonce before exporting. Prefer admin-post with capability checks.

  • medium handle_code_change_request missing nonce (CSRF)

    missing_nonce

    Logged-in affiliates can request code changes via wp_ajax_request_code_change without check_ajax_referer. A CSRF attack against an authenticated affiliate could submit a pending code-change request.

    custom-affiliate-system.php:974-1006

    Recommendation

    Add check_ajax_referer consistent with handle_payout_request.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.