Cloak Affiliate Links for WooCommerce

1.0.39 – 2026/10/05

Security: cloaked links only redirect for published, non-password-protected products (or users who can read the product). New wccal_is_redirect_allowed filter.

Security: the redirect only follows http and https URLs.

Security: settings and the “Affiliate link base” are validated on save.

Security: escaped admin output.

Fix: saving an external product outside the WordPress Admin Area (REST API, cron) no longer stores the cloaked URL as the product URL.

1.0.37 – 2025/09/15

Changed plugin name to comply with WooCommerce’s trademark.

1.0.36 – 2024/12/30

Fixed CSRF issue

1.0.35 – 2024/07/05

Updated “tested up to” value

1.0.34 – 2024/03/18

Updated permalink saving.

1.0.33 – 2023/11/10

Updated “tested up to” value

Declared WooCommerce HPOS compatibility

1.0.32 – 2023/05/02

Added 2 public properties to Wccal class.

1.0.31 – 2023/04/20

Updated “tested up to” values.

1.0.30 – 2022/10/28

Updated “tested up to” values.

1.0.29 – 2021/08/09

Added wccal_product_url_permalink filter.

Added wccal_product_url_qs filter.

1.0.28 – 2021/07/13

Forgot one small change in last update.

1.0.27 – 2021/07/13

Updated to support WordPress 5.8.

Updated to support WooCommerce 5.5.

1.0.26 – 2020/03/08

Updated to support WordPress 5.7.

1.0.25 – 2020/12/01

Updated to support WordPress 5.6.

1.0.24 – 2020/09/30

Updated to support WooCommerce 4.5.

1.0.23 – 2020/07/27

Updated to support WooCommerce 4.3.

1.0.22 – 2020/03/11

Updated to support WooCommerce 4