WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF

The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajaxblinks function which ultimately calls the checkurlstatuscode function. This makes it possible for unauthenticated attackers to make web requests to...

CVE-2026-18937

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-18937 CVE-2026-18937 Broken Link Checker 2.4.11 - wordpress.org I am @abraxasnull. Loopback lab. The client is CVE-2026-18937-Abraxas-Labs.py. Query vars become globals. On plain permalinks,...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

CVE-2022-42889-Text4Shell-POC

Broken Link Hijack Poc By: Alfaz Download CVE-2022-42889-Text4Shell-POC Click Here...

WordPress Broken Link Notifier plugin 1.3.1-2.0.0.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Amin Guliyev in WordPress Plugin Broken Link Notifier versions 1.3.1-2.0.0.0...

CVE-2026-97316

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

CVE-2026-97316

The Broken Link Notifier WordPress plugin, specifically versions prior to 2.0.0.1 , is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause is a failure to re-validate the destination of redirects when the plugin checks links. This allows an attacker to bypass the ...

CVE-2026-97316 Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

EUVD-2026-89627

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

CVE-2026-97316 Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

CVE-2026-97316: Server-Side Request Forgery (SSRF)

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

PT-2026-103048

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...

Exploit for CVE-2026-18937

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-84772

Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...

CVE-2026-84772

A Server-Side Request Forgery (SSRF) vulnerability was identified in the Broken Link Checker WordPress plugin, affecting versions ≤ 2.4.14 . The flaw is exploitable by users with Editor privileges, allowing them to forge server-side requests. The CVSS 3.1 score is 5.5 (Medium) with a changed scop...

CVE-2026-84772 WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability

Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...

EUVD-2026-69940

Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...

CVE-2026-84772 WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability

Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...

WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Broken Link Checker versions = 2.4.14...

CVE-2026-75528

The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...