WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
broken-link-checker
Published
2015-04-20
Title
Broken Link Checker <= 1.10.5 - CSRF/XSS
Slug
broken-link-checker
Published
2015-06-29
Title
Broken Link Checker <= 1.10.8 - Unauthenticated Stored XSS
Slug
broken-link-checker
Published
2019-10-15
Title
Broken Link Checker <= 1.11.8 - Authenticated Cross-Site Scripting (XSS)
Slug
broken-link-checker
Published
2014-12-05
Title
Broken Link Checker <= 1.10.2 - Stored XSS
Slug
broken-link-checker
Published
2022-08-16
Title
Broken Link Checker < 1.11.17 - Admin+ PHAR Deserialization
Slug
broken-link-checker
Published
2022-11-11
Title
Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting
Slug
broken-link-checker
Published
2024-02-12
Title
Broken Link Checker < 2.2.4 - Admin+ Stored Cross-Site Scripting
Slug
broken-link-checker
Published
2024-09-30
Title
Broken Link Checker < 2.4.1 - Reflected XSS
Slug
broken-link-checker
Published
2024-12-05
Title
Broken Link Checker < 2.4.2 - Admin+ SSRF
Slug
broken-link-checker
Published
2025-06-02
Title
Broken Link Checker < 2.4.5 - Subscriber+ Plugin Status Dashboard View
Slug
broken-link-checker-for-youtube
Published
2023-11-23
Title
Broken Link Checker for YouTube <= 1.3 - Cross-Site Request Forgery via plugin_settings_page()
Slug
broken-link-checker-seo
Published
2025-04-05
Title
Broken Link Checker by AIOSEO < 1.2.4 - Authenticated (Contributor+) SQL Injection
Slug
broken-link-checker-seo
Published
2025-11-17
Title
Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links < 1.2.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Trashing
Slug
broken-link-checker-seo
Published
2025-12-09
Title
Broken Link Checker < 1.2.7 - Authenticated (Author+) SQL Injection
Slug
broken-link-finder
Published
2023-10-16
Title
Broken Link Checker | Finder < 2.5.0 - Missing Authorization via moblc_auth_save_settings
Slug
broken-link-finder
Published
2024-12-18
Title
Broken Link Checker | Finder < 2.5.1 - Authenticated (Author+) Blind Server-Side Request Forgery
Slug
broken-link-manager
Published
2015-07-04
Title
Broken Link Manager < 0.5.0 - Unauthenticated SQL Injection & XSS
Slug
broken-link-manager
Published
2015-07-16
Title
Broken Link Manager < 0.6.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
broken-link-manager
Published
2021-07-24
Title
Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection
Slug
broken-link-manager
Published
2025-11-03
Title
Broken Link Manager <= 0.6.5 - Reflected XSS
Slug
broken-link-notifier
Published
2025-07-10
Title
Broken Link Notifier < 1.3.1 - Unauthenticated Server-Side Request Forgery
Slug
broken-link-notifier
Published
2025-07-10
Title
Broken Link Notifier < 1.3.1 - Authenticated (Contributor+) CSV Injection
Slug
broken-link-notifier
Published
2026-01-29
Title
Broken Link Notifier < 1.3.6 - Missing Authorization
Slug
broken-links-remover
Published
2025-04-17
Title
Broken Links Remover <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
browse-as
Published
2025-05-29
Title
Browse As <= 0.2 - Subscriber+ Authentication Bypass via Cookie