Broken Link Checker
16 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Broken Link Checker, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
Broken Link Checker CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 1 |
| 2024-11 | 0 |
| 2024-12 | 1 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 1 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 1 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 1 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 2 |
Severity
How the 16 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High5
- Medium8
- Low2
Latest CVEs
The 15 most recently published vulnerabilities affecting Broken Link Checker.
- CVE-2026-84772WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability5.5
- CVE-2026-75528Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log7.2
- CVE-2026-39466WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability7.6
- CVE-2025-67962WordPress Broken Link Checker plugin <= 1.2.6 - SQL Injection vulnerability7.6
- CVE-2025-4047Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View4.3
- CVE-2024-10903Broken Link Checker < 2.4.2 - Admin+ SSRF4.7
- CVE-2024-8981Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting7.1
- CVE-2024-25592WordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2023-23737WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection9.3
- CVE-2014-125105Broken Link Checker Plugin Settings Page core.php options_page cross site scripting2.4
- CVE-2015-10098Broken Link Checker Plugin ui_get_action_links cross site scripting3.5
- CVE-2022-3922Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting4.8
- CVE-2022-2438Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization7.2
- CVE-2019-17207A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to injec...5.4
- CVE-2019-16521The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The ...6.1
Product grouping is registry-driven, with AI assist and human review. How it works