What’s Vulnerable › Products

wpmudev Broken Link Checker vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your wpmudev Broken Link Checker version is affected

Latest wpmudev Broken Link Checker vulnerabilities

• CVE-2026-96562 — Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback (CVSS 6.5)
• CVE-2026-75528 — Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log (CVSS 7.2)
• CVE-2026-18937 — Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection (CVSS 9.0)
• CVE-2025-4047 — Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View (CVSS 4.3)
• CVE-2024-10903 — Broken Link Checker < 2.4.2 - Admin+ SSRF (CVSS 4.7)
• CVE-2024-8981 — Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting (CVSS 7.1)
• CVE-2023-23737 — WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection (CVSS 9.8)
• CVE-2014-125105 — Broken Link Checker Plugin Settings Page core.php options_page cross site scripting (CVSS 6.1)
• CVE-2022-3922 — Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting (CVSS 4.8)
• CVE-2022-2438 — Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization (CVSS 7.2)
• CVE-2019-17207 — (CVSS 5.4)
• CVE-2019-16521 — (CVSS 6.1)