CVE-2025-27335

Summary

CVE-2025-27335 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Free plug-in by SEO Roma Auto Tag Links. The flaw allows an attacker to submit malicious requests on behalf of a user, potentially leading to unintended actions such as account takeover or data modification. The vulnerability can be exploited on versions of Auto Tag Links ranging from n/a to 1.0.13. Users of this plug-in are recommended to update to the latest version or consider alternative solutions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.