Known vulnerabilities in Internal Link Juicer: SEO Auto Linker for WordPress

Improve your SEO and your user experience through internal linkbuilding. Automated links between your posts based on a smart keyword configuration.

2Reported vulnerabilities

4.8Highest CVSS score

2.26.0Latest version

90,000+Active installs

What to do now

Update Internal Link Juicer: SEO Auto Linker for WordPress to 2.24.4 or later. 2 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-0657	Medium 4.8	0.3%	Before 2.23.5	`2.23.5`	February 9, 2024
CVE-2024-37941	Medium 4.3	0.2%	2.24.3 and earlier	`2.24.4`	July 12, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.