Critical · 9.3 CVE-2023-23737 EUVD-2023-27823GHSA-9vph-3jrp-5jwh

WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection

Published Oct 12, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mainwp Product: MainWP Broken Links Checker Extension

Description

Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.

Affected products

Vendor	Product	Affected	Fixed
MainWP	MainWP Broken Links Checker Extension	≤ 4.0	—

References

https://patchstack.com/database/vulnerability/mainwp-broken-links-checker-extension/wordpress-mainwp-broken-links-checker-extension-plugin-4-0-unauthenticated-sql-injection-vulnerability?_s_id=cve vdb-entry