Simple Keyword to Link

Simple Keyword to Link has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (100%).

None of the 2 issues recorded for Simple Keyword to Link have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. Simple Keyword to Link is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

2

Fixed

0

Get automatic notifications for all Simple Keyword to Link vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-68573

Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

2 records
Simple Keyword to Link banner
Latestv1.5

Simple Keyword to Link

Alessandro Piconi

Author

Alessandro Piconi

5.0(2)
100/100
Last Updated
2024-08-21 (2y ago)
Active Installs
3,000+
Downloads
4,770
Requires WP
4.7+
Requires PHP
7.0+
Tested up to
WP 6.6.7
Created
2023-02-16 (4y ago)

Supported Languages: English and Italian. At the moment. This is a very basic version of the plugin, where I’ve filled in as many necessities as I can think of, while trying to keep it as simple and intuitive as possible. If there are any bugs or you want new features, write me at attesor@gmail.com and I will try to update the plugin as soon as possible. Before writing a bad review of the plugin, please contact me for any problem: if you want to leave a positive one, thank you! Author: Alessandro Piconi Author website:https://www.invernomuto.net Banner Image By Vito Drolec https://unsplash.com/it/foto/Hlosy9Nid1M

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C