SEO Auto Linker
SEO Auto Linker has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for SEO Auto Linker has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Que Thanh Tuan - Blue Rock. SEO Auto Linker is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-58791SEO Auto Linker <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

SEO Auto Linker
Author
Arjan Olsder
Want to automatically create cornerstone content? WPA SEO Auto Linker helps get this done. Simply create a new keyword or a new phrase. The system will link that keyword or phrase to your chosen dofollow URL. Through the settings, it is easy to finetune the workings of this plugin. For performance, it is best to make use of a caching engine. “Using this plugin didn’t just help define cornerstone content in our SEO strategy, it also increased pageviews by 18%. The average visitor spends 13 seconds more on our website.” – Roelof van Doorn, technical editor at GadgetGear.nl While our plugin has been without support for three years, we have seen a lot of similar plugins moving in. Please note we will not be adding fancy interfaces or click tracking. The reason is we want to remain the fastest tool on the market. Click tracking takes a heavy hit on your database while creating a smooth graphical interface will lead to code bloat and the security risks that come with maintaining huge heaps of code. We just don’t want that. Credits WPA SEO Auto Linker plugin is based on the SEO Auto Links 0.5 plugin by Maarten Brakkee. https://wordpress.org/plugins/seo-auto-links/ The SEO Auto links plugin is based on the SEO Smart Links 2.7.6 plugin by Vladimir Prelovac: https://wordpress.org/plugins/seo-automatic-links/ Inspiration for SEO Smart Links originated from the Autolink plugin by Chris Lynch http://www.planetofthepenguins.com/ License This file is part of WPA SEO Auto Linker. WPA SEO Auto Linker is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. WPA SEO Auto Linker is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with WPA SEO Auto Linker. If not, see http://www.gnu.org/licenses/.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C