SEO Backlink Monitor

SEO Backlink Monitor has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Server-Side Request Forgery (SSRF).

1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, most of them (2) reported by Nabil Irawan. SEO Backlink Monitor is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage33%

Open

Fixed

Get automatic notifications for all SEO Backlink Monitor vulnerabilities before they are exploited.

Most severe open issueCVSS 5.5CVE-2025-53457

SEO Backlink Monitor <= 1.6.0 - Authenticated (Administrator+) Server-Side Request Forgery

Read the full analysis

Vulnerability Records

3 records


2025-09-22 00:00	SEO Backlink Monitor <= 1.6.0 - Cross-Site Request Forgery SEO Backlink Monitor <= 1.6.0	`CVE-2025-53456`	4.3 Medium	Nabil Irawan	No
2025-09-22 00:00	SEO Backlink Monitor <= 1.6.0 - Authenticated (Administrator+) Server-Side Request Forgery SEO Backlink Monitor <= 1.6.0	`CVE-2025-53457`	5.5 Medium	Nabil Irawan	No
2024-03-25 00:00	SEO Backlink Monitor <= 1.5.0 - Reflected Cross-Site Scripting SEO Backlink Monitor <= 1.5.0	`CVE-2024-29907`	6.1 Medium	Dimas Maulana	Yes

Showing 1–3 of 3 reports

Latestv1.9.1

SEO Backlink Monitor

Author

activewebsight

4.6(10)

92/100

Last Updated

2026-07-27 (2mo ago)

Active Installs

700+

Downloads

19,396

Requires WP

4.7.5+

Requires PHP

7.0+

Tested up to

WP 7.0.4

Created

2019-01-06 (8y ago)

SEO Backlink Monitor is a WordPress plugin that lets you track your Link Building campaign. Add your link and check if it is do follow or no follow (desktop and mobile user agent), live or not. It can auto-check all your links with wp-cron (you can select the frequency) and get a report to your email address, when a link changes its state. It is a modified/optimized version by Active Websight from the original Backlink Monitoring Manager (v0.1.3); special thanks to Syed Fakhar Abbas <3.

View on WordPress.org