Managewp

Broken Link Checker

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.7

CVE-2024-10903

Exploit
  • EPSS 0.06%
  • Veröffentlicht 26.12.2024 06:15:05
  • Zuletzt bearbeitet 14.05.2025 15:04:30

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.

9.8

CVE-2023-23737

  • EPSS 0.15%
  • Veröffentlicht 12.10.2023 12:15:10
  • Zuletzt bearbeitet 21.11.2024 07:46:45

Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.

6.1

CVE-2014-125105

  • EPSS 0.08%
  • Veröffentlicht 05.06.2023 01:15:45
  • Zuletzt bearbeitet 21.11.2024 02:03:49

A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function options_page of the file core/core.php of the component Settings Page. The manipula...

4.8

CVE-2022-3922

Exploit
  • EPSS 0.33%
  • Veröffentlicht 28.12.2022 11:15:09
  • Zuletzt bearbeitet 10.04.2025 21:15:44

The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is...

7.2

CVE-2022-2438

  • EPSS 1.34%
  • Veröffentlicht 06.09.2022 18:15:13
  • Zuletzt bearbeitet 05.05.2025 17:18:10

The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up to, and including 1.11.16. This makes it possible for authenticated attackers with administrative privileges and...

5.4

CVE-2019-17207

Exploit
  • EPSS 0.29%
  • Veröffentlicht 18.10.2019 16:15:10
  • Zuletzt bearbeitet 21.11.2024 04:31:51

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress...

6.1

CVE-2019-16521

Exploit
  • EPSS 0.27%
  • Veröffentlicht 16.10.2019 15:15:15
  • Zuletzt bearbeitet 21.11.2024 04:30:45

The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected brok...