Lucene search
+L

38 matches found

Nuclei
Nuclei
•added 2026/10/19 2:08 a.m.•65 views

WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF

The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajaxblinks function which ultimately calls the checkurlstatuscode function. This makes it possible for unauthenticated attackers to make web requests to...

7.2CVSS5.8AI score0.00718EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/10/03 9:55 a.m.•17 views

WordPress Broken Link Notifier plugin 1.3.1-2.0.0.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Amin Guliyev in WordPress Plugin Broken Link Notifier versions 1.3.1-2.0.0.0...

5.8CVSS5.9AI score0.0021EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/30 6:17 a.m.•15 views

CVE-2026-97316

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

5.8CVSS0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 6:00 a.m.•13 views

CVE-2026-97316 Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

5.9AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 6:00 a.m.•21 views

CVE-2026-97316

The Broken Link Notifier WordPress plugin, specifically versions prior to 2.0.0.1 , is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause is a failure to re-validate the destination of redirects when the plugin checks links. This allows an attacker to bypass the ...

5.8CVSS5.9AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 6:00 a.m.•36 views

CVE-2026-97316 Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

0.0021EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 6:00 a.m.•15 views

EUVD-2026-89627

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

5.8CVSS5.9AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•8 views

PT-2026-103048

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

5.8CVSS5.9AI score0.0021EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•16 views

CVE-2026-97316: Server-Side Request Forgery (SSRF)

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

5.8CVSS5.9AI score0.0021EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/20 1:27 p.m.•16 views

CVE-2026-25408

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...

5.3CVSS5.4AI score0.00241EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/19 9:16 a.m.•16 views

CVE-2026-25408

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...

5.3CVSS0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/19 8:27 a.m.•30 views

CVE-2026-25408

CVE-2026-25408: A Missing Authorization vulnerability in WordPress Broken Link Notifier (plugin broken-link-notifier) affects versions

5.3CVSS6AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/19 8:27 a.m.•44 views

CVE-2026-25408 WordPress Broken Link Notifier plugin <= 1.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...

5.3CVSS0.00241EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/19 8:27 a.m.•10 views

CVE-2026-25408

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...

5.4AI score0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/19 8:27 a.m.•8 views

CVE-2026-25408 WordPress Broken Link Notifier plugin <= 1.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...

6AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•21 views

PT-2026-20733

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...

5.4AI score0.00241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•10 views

CVE-2026-25408: Missing Authorization

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through = 1.3.5...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•23 views

WordPress plugin Broken Link Notifier 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00241EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/29 5:33 a.m.•16 views

WordPress Broken Link Notifier plugin <= 1.3.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Broken Link Notifier versions = 1.3.5...

5.3CVSS5.4AI score0.00241EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-21125

Malicious code in bioql PyPI...

7.2CVSS6.3AI score0.00718EPSS
SaveExploits0References2
Rows per page
Query Builder