VendorsManageWPbroken_link_checkerany version
Vulnerabilities

ManageWP Broken Link Checker any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2023-23737
WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection
Published 2023-10-12 · Modified
9.8EPSS 0.006
CVE-2022-2438
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Published 2022-09-06 · Modified
7.2EPSS 0.018
CVE-2019-16521
The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS payload in the s_filter GET parameter in a filter_id=search request. NOTE: this is an end-of-life product.
Published 2019-10-16 · Modified
6.1EPSS 0.014
CVE-2014-125105
Broken Link Checker Plugin Settings Page core.php options_page cross site scripting
Published 2023-06-05 · Modified
6.1EPSS 0.005
CVE-2019-17207
A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the wp-admin/tools.php?page=view-broken-links s_filter parameter in a search action.
Published 2019-10-18 · Modified
5.4EPSS 0.016
CVE-2022-3922
Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting
Published 2022-12-28 · Modified
4.8EPSS 0.005
CVE-2024-10903
Broken Link Checker < 2.4.2 - Admin+ SSRF
Published 2024-12-26 · Analyzed
4.7EPSS 0.004