WordPress plugin
Website Internal Link Optimiser security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All Website Internal Link Optimiser vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤5.2.7No patch available | CVE-2026-66464 | |
| Medium6.1 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤5.1.3Update to 5.1.4 | CVE-2025-39547 | |
| Medium5.3 | Missing Authorization to Unauthenticated Settings Update ≤5.1.2Update to 5.1.3 | CVE-2025-32243 |
- Medium5.3Missing Authorization
≤5.2.7No patch available
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
≤5.1.3Update to 5.1.4
- Medium5.3Missing Authorization to Unauthenticated Settings Update
≤5.1.2Update to 5.1.3
Website Internal Link Optimiser: common questions
Does Website Internal Link Optimiser have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Website Internal Link Optimiser: 3 medium. At least one is not fixed in the latest version.
How do I check which version of Website Internal Link Optimiser I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Website Internal Link Optimiser vulnerability?
CVE-2026-66464, published Aug 10, 2026: Website Internal Link Optimiser <= 5.2.7 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Website Internal Link Optimiser vulnerability listed in CISA KEV?
No. None of the known Website Internal Link Optimiser vulnerabilities is currently listed in the CISA KEV catalog.