cleantalk
Vulnerabilities and Security Researches

Vulnerabilities and security researches forautomatic-internal-links-for-seo automatic-internal-links-for-seo

Direction: ascending
Jun 07, 2024

Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) # 76eb7ad6e03c9af9dec59440341bb49b4667848b

Date
Feb 28, 2022
Research Description
Automatic Internal Links for SEO by Pagup [automatic-internal-links-for-seo] < 1.0.4 WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin (versions <= 1.0.3).
Affected versions
max 1.0.4.
Status
vulnerable
Nov 16, 2024

Internal Linking for SEO traffic &amp; Ranking &#8211; Auto internal links (100% automatic) # CVE-2022-4974

CVE, Research URL

CVE-2022-4974

Date
Oct 16, 2024
Research Description
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
Affected versions
max 1.0.4.
Status
vulnerable
Nov 28, 2024

Internal Linking for SEO traffic &amp; Ranking &#8211; Auto internal links (100% automatic) # CVE-2024-11009

CVE, Research URL

CVE-2024-11009

Date
Nov 27, 2024
Research Description
The Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions
max 1.2.2.
Status
vulnerable
May 03, 2026

Internal Linking for SEO traffic &amp; Ranking &#8211; Auto internal links (100% automatic) # CVE-2024-13362

CVE, Research URL

CVE-2024-13362

Date
May 01, 2026
Research Description
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions
max 2.0.1.
Status
vulnerable
Jun 13, 2026

Internal Linking for SEO traffic &amp; Ranking &#8211; Auto internal links (100% automatic) # CVE-2023-33999

CVE, Research URL

CVE-2023-33999

Date
Jun 11, 2026
Research Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2.
Affected versions
max 1.1.2.
Status
vulnerable
Jun 16, 2026

Internal Linking for SEO traffic &amp; Ranking &#8211; Auto internal links (100% automatic) # bb4d8c6ce231464414d44706e8b51467551524ef

Date
Feb 28, 2022
Research Description
Automatic Internal Links for SEO by Pagup [automatic-internal-links-for-seo] < 1.0.4 WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin <= 1.0.3 - Sensitive Information Disclosure vulnerability Sensitive Information Disclosure vulnerability discovered in WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin (versions <= 1.0.3).
Affected versions
max 1.0.4.
Status
vulnerable

Internal Linking for SEO traffic &amp; Ranking &#8211; Auto internal links (100% automatic) # 6d8910c719b2a132ec93828cd37e418b19cac960

Date
Mar 04, 2022
Research Description
Automatic Internal Links for SEO by Pagup [automatic-internal-links-for-seo] < 1.0.4 Freemius SDK <= 2.4.2 - Missing Authorization Checks The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
Affected versions
max 1.0.4.
Status
vulnerable