CVE-2015-9467: Improper Neutralization of Special Elements used in an SQL Command

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

PT-2019-7426

Name of the Vulnerable Software and Affected Versions broken-link-manager plugin versions prior to 0.5.0 Description The issue concerns SQL injection via the url parameter in the wpslDelURL or wpslEditURL functions. This allows for potential SQL injection attacks. Recommendations For versions pri...

PT-2019-7427

Name of the Vulnerable Software and Affected Versions broken-link-manager plugin version 0.4.5 Description The issue concerns a cross-site scripting XSS flaw. It is triggered via the page parameter in a delURL action. Recommendations For version 0.4.5, consider disabling the delURL action until a...

CVE-2015-9468: Improper Neutralization of Input During Web Page Generation

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

Design/Logic Flaw

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

CVE-2015-9453

The CVE concerns the WordPress Broken Link Manager plugin, affected versions before 0.6.0. Root cause: the plugin does not properly validate or sanitize input via HTTP Referer or User‑Agent headers when requests target a non-existent URL, enabling cross‑site scripting. Impact: attacker can inject...

CVE-2015-9453

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

PT-2019-7412

Name of the Vulnerable Software and Affected Versions broken-link-manager plugin versions prior to 0.6.0 for WordPress Description The issue allows for XSS via the HTTP Referer or User-Agent header to a URL that does not exist. Recommendations For versions prior to 0.6.0, update to version 0.6.0 ...

CVE-2015-9453: Improper Neutralization of Input During Web Page Generation

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

Broken Link Manager <= 0.4.5 - Unauthenticated SQL Injection & XSS

The Broken Link Manager WordPress plugin was affected by an Unauthenticated SQL Injection & XSS security vulnerability...

WordPress Broken Link Manager Plugin <= 0.4.5 - SQL Injection

Because of this vulnerability, unauthenticated remote attackers can execute arbitrary SQL commands and inject malicious javascript. Solution Update the plugin...