Broken link checker

This hub aggregates every CVE we track for Broken link checker, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Broken link checker.

• CVE-2026-84772WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability5.5Sep 2, 2026
• CVE-2026-75528Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log7.2Sep 2, 2026
• CVE-2026-39466WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability7.6Apr 8, 2026
• CVE-2025-67962WordPress Broken Link Checker plugin <= 1.2.6 - SQL Injection vulnerability7.6Dec 16, 2025
• CVE-2025-4047Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View4.3Jun 3, 2025
• CVE-2024-10903Broken Link Checker < 2.4.2 - Admin+ SSRF4.7Dec 26, 2024
• CVE-2024-8981Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting7.1Oct 1, 2024
• CVE-2024-25592WordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability5.9Mar 15, 2024
• CVE-2023-23737WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection9.3Oct 12, 2023
• CVE-2014-125105Broken Link Checker Plugin Settings Page core.php options_page cross site scripting2.4Jun 5, 2023
• CVE-2015-10098Broken Link Checker Plugin ui_get_action_links cross site scripting3.5Apr 8, 2023
• CVE-2022-3922Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting4.8Dec 28, 2022
• CVE-2022-2438Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization7.2Sep 6, 2022
• CVE-2019-17207A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to injec...5.4Oct 18, 2019
• CVE-2019-16521The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The ...6.1Oct 16, 2019