K-78 Broken Link Manager — known CVE vulnerabilities

Every CVE whose affected-product data names K-78 Broken Link Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2015-9467 — CVSS 9.8 (critical): The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.
• CVE-2015-9453 — CVSS 6.1 (medium): The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.
• CVE-2015-9468 — CVSS 6.1 (medium): The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.