WordPress Broken Link Manager plugin <= 0.6.5 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Shreya Pohekar in WordPress Broken Link Manager plugin versions = 0.6.5. Solution This plugin has been closed as of June 1, 2021 and is not available for download. Reason: Security Issue...

CVE-2021-24127

The CVE-2021-24127 entry affects the WordPress plugin ThirstyAffiliates Affiliate Link Manager, versions before 3.9.3. The issue is an authenticated Stored Cross-Site Scripting (XSS) caused by unvalidated input and lack of output encoding in the plugin, with potential privilege escalation as desc...

WordPress broken-link-manager plugin cross-site scripting vulnerability (CNVD-2019-42841)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-manager is a backlink management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress broken-link-manager plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-manager is a backlink management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress broken-link-manager plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-manager is a backlink management plugin used in it. The WordPress broken-link-manager plugin suffers from an SQL injection...

CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

Design/Logic Flaw

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

CVE-2015-9468

The CVE-2015-9468 entry concerns the WordPress Broken Link Manager plugin v0.4.5, which is vulnerable to cross-site scripting (XSS) via the page parameter in a delURL action. This vulnerability is documented across multiple sources (NVD/NVD-derived entries and related advisories) and is tied to t...

CVE-2015-9468

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

CVE-2015-9467

The CVE-2015-9467 vulnerability affects the WordPress Broken Link Manager plugin (before 0.5.0). The root cause is an SQL injection via the url parameter using the wpslDelURL or wpslEditURL vectors, enabling an attacker to execute arbitrary SQL commands. References (NVD/Red Hat/CNVD) corroborate ...

CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

The vulnerability of the /web/Public/Conn.php component of the software controller for centralized control of wireless networks in D-Link Central WiFi Manager CWM(100) allows a intruder to execute arbitrary code.

The vulnerability of the /web/Public/Conn.php component of the software controller for centralized control of D-Link Central WiFi Manager CWM100 relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute...

Design/Logic Flaw

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

CVE-2015-9453

The CVE concerns the WordPress Broken Link Manager plugin, affected versions before 0.6.0. Root cause: the plugin does not properly validate or sanitize input via HTTP Referer or User‑Agent headers when requests target a non-existent URL, enabling cross‑site scripting. Impact: attacker can inject...

CVE-2018-19860

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command...

CVE-2017-8985

HPE XP Storage using Hitachi Global Link Manager HGLM has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00...

CVE-2017-8985

HPE XP Storage using Hitachi Global Link Manager HGLM has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00...

CVE-2017-8985

CVE-2017-8985 concerns HPE XP Storage using Hitachi Global Link Manager (HGLM). The affected stack is HGLM versions 6.3.0-00 through 8.5.2-00. The vulnerability is described as a local authenticated information disclosure vulnerability, with access limited to the local attacker (no user interacti...

Broken Link Manager <= 0.4.5 - Unauthenticated SQL Injection & XSS

The Broken Link Manager WordPress plugin was affected by an Unauthenticated SQL Injection & XSS security vulnerability...

WordPress Broken Link Manager Plugin <= 0.4.5 - SQL Injection

Because of this vulnerability, unauthenticated remote attackers can execute arbitrary SQL commands and inject malicious javascript. Solution Update the plugin...