A vulnerability classified as problematic has been found in Internal Links Manager Plugin up to 3.0.1 on WordPress. This issue affects the function
process_bulk_action
. Performing manipulation results in cross-site request forgery.
This vulnerability is known as CVE-2025-9949. Remote exploitation of the attack is possible. No exploit is available.