WordPress Plugin Vulnerabilities

Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass

Description

The plugin does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services.

Proof of Concept

Affects Plugins

Plugin icon
broken-link-notifier
Fixed in 2.0.0.1

References

CVE
CVE-2026-97316

Classification

Type
SSRF
OWASP top 10
A1: Injection
CWE
CWE-918
CVSS
5.8 (medium)

Miscellaneous

Original Researcher
Amin Guliyev
Submitter
Amin Guliyev
Verified
Yes
WPVDB ID
d9497ddd-c39c-4928-8660-f1c94ef2c3a0

Timeline

Publicly Published
2026-09-28 (about 2 days ago)
Added
2026-09-28 (about 1 day ago)
Last Updated
2026-09-28 (about 1 day ago)

Other

Published
Title
Published
2014-05-28
Title
Jrss Widget <= 1.2 - SSRF
Published
2025-12-18
Title
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
Published
2026-02-13
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
Published
2023-06-06
Title
Getwid < 1.8.4 - Subscriber+ SSRF
Published
2019-10-14
Title
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation