Medium · 4.3 CVE-2025-27335 EUVD-2025-4327GHSA-3775-gcxp-8pxm

WordPress Auto Tag Links Plugin <= 1.0.13 - Cross Site Request Forgery (CSRF) vulnerability

Published Feb 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Free plug in by SEO Roma Product: Auto Tag Links

Description

Cross-Site Request Forgery (CSRF) vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through <= 1.0.13.

Affected products

Vendor	Product	Affected	Fixed
Free plug in by SEO Roma	Auto Tag Links	≤ 1.0.13	—

References

https://patchstack.com/database/Wordpress/Plugin/auto-tag-links/vulnerability/wordpress-auto-tag-links-plugin-1-0-13-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry