236 matches found
WordPress Broken Link Checker < 2.4.12 - Remote Code Execution
The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables on the server when a classic non-block theme is active. id:...
CVE-2026-18937
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-18937 Write-up: https://abraxaslabs.tech/research/CVE-2026-18937 CVE-2026-18937 Broken Link Checker 2.4.11 - wordpress.org I am @abraxasnull. Loopback lab. The client is CVE-2026-18937-Abraxas-Labs.py. Query...
CVE-2026-96562
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possibl...
CVE-2026-96562 Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possibl...
EUVD-2026-102635
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possibl...
CVE-2026-96562
The Broken Link Checker plugin for WordPress (versions up to and including 2.4.14.1 ) is vulnerable to arbitrary shortcode execution . The root cause is a failure to properly validate values before calling the do_shortcode function. An unauthenticated attacker can exploit this by submitting a com...
CVE-2026-96562 Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possibl...
PT-2026-115439
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do shortcode. This makes it possib...
CVE-2026-96562: Improper Control of Generation of Code
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possibl...
WordPress Broken Link Checker: Code Injection Vulnerability
WordPress Broken Link Checker 2.4.14.1 and earlier versions have a code injection vulnerability. This vulnerability arises from insufficient validation of values before running doshortcode, which may allow unauthenticated attackers to execute arbitrary short codes. The href or src attributes...
CVE-2026-102389
Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...
CVE-2026-102389
The WPMU DEV Broken Link Checker plugin (versions ≤ 2.4.14.1 ) is vulnerable to a Code Injection (CWE-94) vulnerability. This flaw allows for Content Injection because of the Improper Control of Generation of Code . While the base severity is rated as MEDIUM (6.5) with a HIGH confidentiality impa...
CVE-2026-102389 WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...
EUVD-2026-102050
Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...
CVE-2026-102389 WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...
PT-2026-114918
Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...
CVE-2026-102389: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...
WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability
Content Injection vulnerability discovered by changsheng in WordPress Plugin Broken Link Checker versions = 2.4.14.1...
deadfinder
Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...
