CVE-2025-9949

Published
View on NVD ↗
CVSS v3
4.3
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT

Description

The Internal Links Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the link deletion functionality in the process_bulk_action() function. This makes it possible for unauthenticated attackers to delete SEO links via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

<h3>What does Internal Links Manager do?</h3> <p>You simply provide a keyword and an URL. Whenever the keyword appears on your site, it builds links automatically to the given URL.</p> <p>Here is an example: You have written a blogpost on &#8220;How to learn guitar&#8221;. Now you want the URL &#8220;yourdomain.com/how-to-learn-guitar&#8221; to be automatically linked whenever the keyword &#8220;learn guitar&#8221; appears on your website. You simply navigate to &#8220;Add link&#8221; within the menu and provide the requested parameters (mainly keyword + URL).</p> <h3>Why (internal) link building is so important</h3> <p>Improve your UX: Give your users the opportunity to discover relevant content with one click. Link important keywords with an related link. Your users stay longer on your website and get relevant information. As a side effect it improves your bounce rate, which is one of Googles ranking factors.</p> <p>Boost your SEO: Internal links also important for search engines. Through internal links you can spread link equity and establish your site architecture.</p> <h3>How to use</h3> <ol> <li>Select menu item &#8220;Add link&#8221;</li> <li>Assign title (mainly for internal use)</li> <li>Optionally assign a link title (title attribute <a title="””" rel="nofollow ugc"> in HTML)</a></li> <li>Assign keywords, comma separated (keyword1, keyword2, etc.)</li> <li>Enter URL (Where should the keyword link to?)</li> <li>Optionally increase the number (How often should the link appear on a page?)</li> <li>Optionally set link nofollow (Should searchengine follow this link?)</li> <li>Choose link target (Open link in same tab or in new tab)</li> <li>Click save</li> </ol> <p>The specified keywords on your website are now provided with the corresponding link and settings.</p>
WordPress Plugin DirectoryWordPress Plugin Directory
208K