Seo Backlink Monitor Vulnerabilities

The SEO Backlink Monitor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application which ca...

CVSS:

5.5

Affected:

up to 1.6.0

Fix:

No patched version reported

Disclosed:

Sep 22, 2025

CVE-2025-53457 on NVD →

The SEO Backlink Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they...

CVSS:

4.3

Affected:

up to 1.6.0

Fix:

No patched version reported

Disclosed:

Sep 22, 2025

CVE-2025-53456 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0.

Affected:

up to 1.6.0

Fixed in:

1.6.0

Disclosed:

Mar 27, 2024

CVE-2024-29907 on NVD →

The SEO Backlink Monitor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a use...

CVSS:

6.1

Affected:

up to 1.5.0

Fixed in:

1.6.0

Disclosed:

Mar 25, 2024

CVE-2024-29907 on NVD →

Affected:

up to 1.6.0

Fix:

No patched version reported

CVE-2025-53456 on NVD →