Skip to content
OpenAdvisories

Product · WPMU DEV

Broken Link Checker

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-75528

    Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log

    The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for una…

    WPMU DEV Broken Link Checker Web / CMS
  • High 7.1
    CVE-2024-8981

    Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting

    The Broken Link Checker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg in /app/admin-notices/features/class-view.php without appropriate escaping on the URL in all versions up to, and including, 2.4.0. Thi…

    WPMU DEV Broken Link Checker Web / CMS
  • High 7.2
    CVE-2022-2438

    Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization

    The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up to, and including 1.11.16. This makes it possible for authenticated attackers with administrative privileges and above to…

    WPMU DEV Broken Link Checker Web / CMS