CVE-2026-97316

The Broken Link Notifier WordPress plugin versions before 2.0.0.1 is vulnerable to an unauthenticated SSRF (Server-Side Request Forgery). The root cause is a failure to re-validate the destination of redirects when checking links, which allows an attacker to bypass the plugin's internal-address f...