CVE-2019-17207

The CVE concerns the WordPress Broken Link Checker plugin (version 1.11.8) where the vulnerability resides in includes/admin/table-printer.php. A reflected cross-site scripting (XSS) flaw is triggered via the s_filter parameter in the admin tools page (wp-admin/tools.php?page=view-broken-links), ...

CVE-2019-16521

The CVE-2019-16521 entry concerns the WordPress Broken Link Checker plugin (

CVE-2022-2438

The CVE-2022-2438 entry concerns the WordPress Broken Link Checker plugin (versions up to 1.11.16). Root cause: deserialization of untrusted input via the '$log_file' value, which can be used with a PHAR wrapper to deserialize data and call arbitrary PHP objects. This requires an authenticated at...

CVE-2022-3922

Summary : CVE-2022-3922 affects the Broken Link Checker WordPress plugin before 1.11.20. The vulnerability arises because the plugin does not sanitise and escape certain settings, enabling a stored Cross-Site Scripting (XSS) for high-privilege users (e.g., admins), even when unfiltered_html is di...

CVE-2024-10903

CVE-2024-10903 concerns the WordPress plugin Broken Link Checker (before 2.4.2). The issue arises because the plugin does not validate the target URLs before requesting them, enabling potential SSRF from an admin user, including in multisite setups. Public sources in the connected docs confirm th...

CVE-2023-23737

CVE-2023-23737 affects the WordPress plugin MainWP Broken Links Checker Extension (≤ 4.0). It is described as an unauthenticated SQL Injection vulnerability with high impact (confidentiality, integrity, and availability) and network access, no privileges required, and no user interaction. Across ...

CVE-2014-125105

CVE-2014-125105 affects the WordPress Broken Link Checker Plugin (up to v1.10.1). The vulnerability resides in the options_page function within core/core.php, where manipulation of the exclusion_list/blc_custom_fields parameter enables cross-site scripting. The issue can be exploited remotely. A ...