291 matches found
deadfinder
데드 링크깨진 링크 찾기 문서 • 설치 • GitHub Action • 기여하기 • 변경 로그 데드 링크깨진 링크는 웹 페이지 내에서 연결할 수 없는 링크를 의미합니다. 이러한 링크는 SEO와 보안에 부정적인 영향을 미칠 수 있습니다. 이 도구를 사용하면 쉽게 식별하고 수정할 수 있습니다. v1 Ruby gem을 찾고 계신가요? 이제 legacy/v1 브랜치에 있으며, 버그 수정 및 보안 릴리스를 위해 deadfinder gem을 계속 게시합니다. main 브랜치는 Crystal 재작성v2+을 호스팅합니다. 설치 Homebre...
WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF
The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajaxblinks function which ultimately calls the checkurlstatuscode function. This makes it possible for unauthenticated attackers to make web requests to...
CVE-2026-18937
abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-18937 CVE-2026-18937 Broken Link Checker 2.4.11 — 未知 Broken Link Checker WordPress 插件在 2.4.12 之前的版本中，在使用普通固定链接（plain permalinks）的站点上未限制其从用户输入接受的查询变量，允许未认证用户覆盖任意 PHP 全局变量，并在经典（非区块）主题处于活动状态时在服务器上执行任意代码。 | ---|--- CVE| CVE-2026-18937 ·...
CVE-2022-42889-Text4Shell-POC
Broken Link Hijack Poc By: Alfaz CVE-2022-42889-Text4Shell-POC のダウンロード ここをクリック...
CVE-2026-84772
Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...
CVE-2026-84772
A Server-Side Request Forgery (SSRF) vulnerability was identified in the Broken Link Checker WordPress plugin, affecting versions ≤ 2.4.14 . The flaw is exploitable by users with Editor privileges, allowing them to forge server-side requests. The CVSS 3.1 score is 5.5 (Medium) with a changed scop...
CVE-2026-84772 WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability
Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...
EUVD-2026-69940
Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...
WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Broken Link Checker versions = 2.4.14...
CVE-2026-75528
The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-75528 Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log
The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
EUVD-2026-69889
The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-75528
CVE-2026-75528 affects the Broken Link Checker plugin for WordPress in all versions up to and including 2.4.13 . The vulnerability is a Stored Cross-Site Scripting (XSS) caused by insufficient input sanitization and output escaping in the Comment Author URL / Link Log functionality. An unauthenti...
WordPress Broken Link Checker plugin <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin Broken Link Checker versions = 2.4.13...
PT-2026-84702
Name of the Vulnerable Software and Affected Versions Broken Link Checker versions prior to 2.4.15 Description An Editor Server Side Request Forgery SSRF exists in the plugin. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location,...
CVE-2026-18937
The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...
CVE-2026-18937
The Broken Link Checker plugin before 2.4.12 accepts unrestricted query variables on sites using plain permalinks, letting unauthenticated users overwrite arbitrary PHP globals and achieve remote code execution when a classic editor is active. CVSS 9.0 (Critical). No exploitation evidence is prov...
CVE-2026-18937 Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection
The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...
EUVD-2026-62285
The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...
