CVE-2026-96562: Improper Control of Generation of Code

The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possibl...

EUVD-2014-1273

Malware in sbrugna...

CVE-2014-125105

A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function optionspage of the file core/core.php of the component Settings Page. The manipulation of the argument exclusionlist/blccustomfiel...

PT-2025-15080

Name of the Vulnerable Software and Affected Versions AIOSEO Broken Link Checker Plugin versions up to 1.2.3 Description The issue is related to a sql injection vulnerability in the orderBy parameter of the AIOSEO Broken Link Checker Plugin on WordPress. Recommendations For AIOSEO Broken Link...

CVE-2014-125105

A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function optionspage of the file core/core.php of the component Settings Page. The manipulation of the argument exclusionlist/blccustomfiel...

CVE-2014-125105

CVE-2014-125105 affects the WordPress Broken Link Checker Plugin (up to v1.10.1). The vulnerability resides in the options_page function within core/core.php, where manipulation of the exclusion_list/blc_custom_fields parameter enables cross-site scripting. The issue can be exploited remotely. A ...

CVE-2014-125105: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function optionspage of the file core/core.php of the component Settings Page. The manipulation of the argument exclusionlist/blccustomfiel...

Cross site scripting

A vulnerability was found in Broken Link Checker Plugin up to 1.10.5 on WordPress. It has been rated as problematic. Affected by this issue is the function printmodulelist/showwarningssectionnotice/statustext/uigetactionlinks. The manipulation leads to cross site scripting. The attack may be...

CVE-2015-10098

A vulnerability was found in Broken Link Checker Plugin up to 1.10.5 on WordPress. It has been rated as problematic. Affected by this issue is the function printmodulelist/showwarningssectionnotice/statustext/uigetactionlinks. The manipulation leads to cross site scripting. The attack may be...

CVE-2015-10098

The CVE affects WordPress Broken Link Checker Plugin versions up to 1.10.5. The vulnerability is an XSS in the plugin’s UI rendering functions (print_module_list/show_warnings_section_notice/status_text/ui_get_action_links), enabling cross-site scripting via manipulation. The issue can be trigger...

CVE-2015-10098: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Broken Link Checker Plugin up to 1.10.5 on WordPress. It has been rated as problematic. Affected by this issue is the function printmodulelist/showwarningssectionnotice/statustext/uigetactionlinks. The manipulation leads to cross site scripting. The attack may be...

CVE-2015-5057

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...

Cross site scripting

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...

CVE-2015-5057

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...

CVE-2015-5057

CVE-2015-5057 describes a Cross-site Scripting (XSS) vulnerability in the WordPress admin panel introduced by the Broken Link Checker plugin prior to version 1.10.9. The issue affects WordPress installations using this plugin and is triggered in the admin area, allowing potential manipulation of ...