PT-2025-51436

Name of the Vulnerable Software and Affected Versions AIOSEO Plugin Team Broken Link Checker versions through 1.2.6 Description The Broken Link Checker component contains a flaw due to improper neutralization of special elements within SQL commands, leading to a potential SQL Injection issue. Thi...

WordPress plugin Broken Link Checker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress Broken Link Checker plugin <= 1.2.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by mcdruid in WordPress Plugin Broken Link Checker versions = 1.2.6...

Description of the security update for Microsoft Exchange Server 2016 CU23: December 9, 2025 (KB5071873)

None None...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: December 9, 2025 (KB5071876)

None None...

Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)

None None...

📄 Azure APIM 2 Vulnerability Checker

This PHP script is a full vulnerability scanner with proof of concepts for Azure API Management APIM instances, focusing on the possibility of cross‑tenant account signup bypass through the Basic Auth Identity Provider...

EUVD-2025-198859

Malicious code in @markvivanco/app-version-checker npm...

MAL-2025-190818 Malicious code in @markvivanco/app-version-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3390637a7e3c1122d5f1f2417189358dec13936938bd997c1bf5949c1bb8dc The package @markvivanco/app-version-checker was found to contain malicious code. Source: ghsa-malware...

Malicious code in @markvivanco/app-version-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3390637a7e3c1122d5f1f2417189358dec13936938bd997c1bf5949c1bb8dc The package @markvivanco/app-version-checker was found to contain malicious code. Source: ghsa-malware...

Malicious code in bytecode-checker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b98e19304d760275f4ded25b69604ea9eb988c2b13681aafd2a400f0319a38c The package bytecode-checker-cli was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198844

Malicious code in bytecode-checker-cli npm...

MAL-2025-190833 Malicious code in bytecode-checker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b98e19304d760275f4ded25b69604ea9eb988c2b13681aafd2a400f0319a38c The package bytecode-checker-cli was found to contain malicious code. Source: ghsa-malware...

WordPress Broken Link Checker by AIOSEO plugin missing authorization vulnerability

WordPress Broken Link Checker by AIOSEO plugin is a tool for detecting and repairing internal and external links on your website, supporting SEO optimization and website maintenance. WordPress Broken Link Checker by AIOSEO plugin suffers from a missing authorization vulnerability, which can be...

CVE-2025-11734

The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization in all versions up to, and including, 1.2.5. This is due to the plugin registering a REST API endpoint that only...

EUVD-2025-197971

The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization in all versions up to, and including, 1.2.5. This is due to the plugin registering a REST API endpoint that only...

CVE-2025-11734

The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization in all versions up to, and including, 1.2.5. This is due to the plugin registering a REST API endpoint that only...

CVE-2025-11734

CVE-2025-11734 concerns the Broken Link Checker by AIOSEO for WordPress. The vulnerability stems from insufficient authorization checks on a REST endpoint used to manage posts. Specifically, the plugin exposes DELETE /wp-json/aioseoBrokenLinkChecker/v1/post and grants the aioseo_blc_broken_links_...

CVE-2025-11734 Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links <= 1.2.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Trashing

The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization in all versions up to, and including, 1.2.5. This is due to the plugin registering a REST API endpoint that only...

CVE-2025-11734 Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links <= 1.2.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Trashing

The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization in all versions up to, and including, 1.2.5. This is due to the plugin registering a REST API endpoint that only...