WordPress Plugin Vulnerabilities

Broken Link Checker 1.9.1 - Bulk Action Form URL H&ling XSS

Description

The Broken Link Checker WordPress plugin was affected by a Bulk Action Form URL H&ling XSS security vulnerability.

Affects Plugins

Plugin icon
broken-link-checker
Fixed in 1.9.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
eda10d2a-1136-4f3e-961c-1790d612d092

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-10-24
Title
Sky Addons for Elementor < 2.5.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-03-03
Title
WP Tabs < 2.2.7 - Admin+ Stored XSS
Published
2025-01-16
Title
Ultimate Events <= 1.3.3 - Reflected Cross-Site Scripting
Published
2024-03-25
Title
Top Bar < 3.0.5 - Admin+ Stored XSS
Published
2025-09-22
Title
Page-list <= 5.8 - Contributor+ Stored XSS