Broken Link Checker (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-19. Vendor: Unknown.

CVEs of Broken Link Checker

• CVE-2026-18937 - CVSS 9 (critical), 2026-08-19: The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks,…
• CVE-2024-10903 - CVSS 4.7 (medium), 2024-12-26: The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to…
• CVE-2022-3922 - CVSS 4.8 (medium), 2022-12-28: The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could allow high privilege users such as…