[CR]Paid Link Manager

[CR]Paid Link Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for [CR]Paid Link Manager has a vendor fix available, so running the current release closes it.

All of these findings were reported by Abdulsamad Yusuf (0xVenus). [CR]Paid Link Manager is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all [CR]Paid Link Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2026-1780

[CR]Paid Link Manager <= 0.5 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv0.6

[CR]Paid Link Manager

Arief Bayu Purwanto

Author

Arief Bayu Purwanto

0.0(0)
0/100
Last Updated
2026-03-11 (6mo ago)
Active Installs
10+
Downloads
8,117
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2010-10-27 (16y ago)

Do you sell your blogroll and having problem in keeping an updated information as to when this particular link is expired? You will no longer be in trouble with this plugin. Introducing: [CR]Paid Link Manager. A plugin that will help you manage your paid link’s life cycle. This is what current version can do: The ability to create a separate group so that you can further set each group belong to what condition. I’ll explain this later. The ability to set per link age. So that it will automatically hide link that’s expired. The ability to store per link notes. It is useful for storing link detail, like client info (email subject reference maybe), so that you can remind him that their link is expiring. Add support for infinite age link (partner link or your other sites) Automatic email reminder for expiring links (sent out daily) With planned (not so distant) future upgrade: Plugin API, so that other plugin or theme developer can use it seamlessly without too much hack Add javascript for link age input. I know you will love this Add ability to specify different separator for &#8216;coma’ mode Open For Hire Got awesome wordpress project? need something to be fixed? plugin to be made? You can contact me at ariefbayu@freelancer.web.id Want to make a paid version of this plugin? let’s discuss…

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C