Lucene search
+L

186 matches found

Kitploit
Kitploit
added 2026/09/02 9:54 p.m.5 views

deadfinder

查找死链(失效链接) 文档 • 安装 • GitHub Action • 贡献 • 变更日志 死链(失效链接)是指网页中无法连接的链接。这些链接可能对 SEO 和安全性产生负面影响。本工具可轻松识别并修改此类链接。 正在寻找 v1(Ruby gem)版本? 它现在位于 legacy/v1 分支,并继续发布 deadfinder gem,仅用于错误修复和安全更新。main 分支承载 Crystal 重写版本(v2+)。 安装 Homebrew root@kitploit: brew install deadfinder...

5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/09/02 11:37 a.m.18 views

CVE-2026-84772

A Server-Side Request Forgery (SSRF) vulnerability was identified in the Broken Link Checker WordPress plugin, affecting versions ≤ 2.4.14 . The flaw is exploitable by users with Editor privileges, allowing them to forge server-side requests. The CVSS 3.1 score is 5.5 (Medium) with a changed scop...

5.5CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 11:37 a.m.7 views

EUVD-2026-69940

Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...

5.5CVSS5.9AI score
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/02 10:19 a.m.5 views

WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Broken Link Checker versions = 2.4.14...

5.5CVSS5.9AI score
SaveExploits0Affected Software1
NVD
NVD
added 2026/09/02 8:16 a.m.5 views

CVE-2026-75528

The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00304EPSS
SaveExploits0References13
EUVD
EUVD
added 2026/09/02 7:39 a.m.5 views

EUVD-2026-69889

The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6AI score0.00304EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2026/09/02 7:39 a.m.21 views

CVE-2026-75528 Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log

The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00304EPSS
SaveExploits0References13
CVE
CVE
added 2026/09/02 7:39 a.m.11 views

CVE-2026-75528

CVE-2026-75528 affects the Broken Link Checker plugin for WordPress in all versions up to and including 2.4.13 . The vulnerability is a Stored Cross-Site Scripting (XSS) caused by insufficient input sanitization and output escaping in the Comment Author URL / Link Log functionality. An unauthenti...

7.2CVSS6AI score0.00304EPSS
SaveExploits0References13
Patchstack
Patchstack
added 2026/09/02 7:30 a.m.10 views

WordPress Broken Link Checker plugin <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin Broken Link Checker versions = 2.4.13...

7.2CVSS5.9AI score0.00304EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/19 6:17 a.m.7 views

CVE-2026-18937

The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...

9CVSS0.00395EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 6:00 a.m.11 views

EUVD-2026-62285

The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...

9CVSS6.1AI score0.00395EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 6:00 a.m.34 views

CVE-2026-18937 Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection

The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...

0.00395EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 6:00 a.m.95 views

CVE-2026-18937

The Broken Link Checker plugin before 2.4.12 accepts unrestricted query variables on sites using plain permalinks, letting unauthenticated users overwrite arbitrary PHP globals and achieve remote code execution when a classic editor is active. CVSS 9.0 (Critical). No exploitation evidence is prov...

9CVSS6.1AI score0.00395EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/13 7:24 p.m.12 views

CVE-2026-39466

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.14 views

EUVD-2026-20137

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

5.9AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.9 views

CVE-2026-39466

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

7.6CVSS0.00279EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.6 views

CVE-2026-39466 WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

5.9AI score0.00279EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.30 views

CVE-2026-39466 WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

7.6CVSS0.00279EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.4 views

CVE-2026-39466

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

5.9AI score0.00279EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/08 8:30 a.m.26 views

CVE-2026-39466

CVE-2026-39466 affects WordPress: WPMU DEV – Broken Link Checker plugin (versions

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0References1
Rows per page
Query Builder