Broken Link Checker
Approved changes feed: RSS · Atom
cpe:2.3:a:managewp:broken_link_checker:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Managewp (f4ccd6b0-01a7-588c-b956-23f2c3c2993c) |
|---|---|
| Product | Broken Link Checker (a5297933-f6f1-5d7c-86c6-1ad7fd51b706) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-10903 |
vulnerable | 2026-06-08 06:23:47.955828 |
Broken Link Checker < 2.4.2 - Admin+ SSRF
The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.
Published: 2024-12-26T06:00:05.613Z
Updated: 2024-12-30T17:13:04.285Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23737 |
vulnerable | 2026-06-08 05:56:04.349400 |
WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection
CRITICAL (9.3)
Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.
Published: 2023-10-12T11:31:50.864Z
Updated: 2026-04-28T16:08:01.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3922 |
vulnerable | 2026-06-08 05:48:22.634075 |
Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting
The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2022-12-28T10:37:25.022Z
Updated: 2025-04-10T20:35:32.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2438 |
vulnerable | 2026-06-08 05:43:35.549618 |
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
HIGH (7.2)
The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up to, and including 1.11.16. This makes it possible for authenticated attackers with administrative privileges and above to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.
Published: 2022-09-06T17:18:57.000Z
Updated: 2026-04-08T16:57:11.959Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17207 |
vulnerable | 2026-06-08 05:13:10.113726 |
Details available
A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the wp-admin/tools.php?page=view-broken-links s_filter parameter in a search action.
Published: 2019-10-18T15:47:35.000Z
Updated: 2024-08-05T01:33:17.290Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16521 |
vulnerable | 2026-06-08 05:13:08.517034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-125105 |
vulnerable | 2026-06-08 05:05:15.847799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.