WordPress broken-link-checker plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-checker is an invalid link checker plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

Cross site scripting

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

CVE-2019-17207

The CVE concerns the WordPress Broken Link Checker plugin (version 1.11.8) where the vulnerability resides in includes/admin/table-printer.php. A reflected cross-site scripting (XSS) flaw is triggered via the s_filter parameter in the admin tools page (wp-admin/tools.php?page=view-broken-links), ...

CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

WordPress Broken Link Check Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-checker is an invalid link checker plugin used in it. A cross-site scripting vulnerability exists in the...

CVE-2019-16521

The broken-link-checker plugin through 1.11.8 for WordPress aka Broken Link Checker is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS...

CVE-2019-16521

The broken-link-checker plugin through 1.11.8 for WordPress aka Broken Link Checker is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS...

Cross site scripting

The broken-link-checker plugin through 1.11.8 for WordPress aka Broken Link Checker is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS...

CVE-2019-16521

The broken-link-checker plugin through 1.11.8 for WordPress aka Broken Link Checker is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS...

CVE-2019-16521

The CVE-2019-16521 entry concerns the WordPress Broken Link Checker plugin (

WordPress Broken Link Checker 1.11.8 Cross Site Scripting

Document Title =============== Reflected XSS via Broken Link Checker v.1.11.8 WordPress plugin. Product Description =============== Broken Link Checker will monitor your blog looking for broken links and let you know if any are found. Homepage: https://managewp.com/ WordPress Plugin:...

WordPress broken-link-manager plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-manager is a backlink management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress broken-link-manager plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-manager is a backlink management plugin used in it. The WordPress broken-link-manager plugin suffers from an SQL injection...

CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

Design/Logic Flaw

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

CVE-2015-9468

The CVE-2015-9468 entry concerns the WordPress Broken Link Manager plugin v0.4.5, which is vulnerable to cross-site scripting (XSS) via the page parameter in a delURL action. This vulnerability is documented across multiple sources (NVD/NVD-derived entries and related advisories) and is tied to t...

CVE-2015-9468

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

CVE-2015-9467

The CVE-2015-9467 vulnerability affects the WordPress Broken Link Manager plugin (before 0.5.0). The root cause is an SQL injection via the url parameter using the wpslDelURL or wpslEditURL vectors, enabling an attacker to execute arbitrary SQL commands. References (NVD/Red Hat/CNVD) corroborate ...