Managewp Broken Link Checker — known CVE vulnerabilities

Every CVE whose affected-product data names Managewp Broken Link Checker, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-23737 — CVSS 9.3 (critical): Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.
• CVE-2022-2438 — CVSS 7.2 (high): The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up…
• CVE-2019-16521 — CVSS 6.1 (medium): The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper…
• CVE-2019-17207 — CVSS 5.4 (medium): A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin…
• CVE-2022-3922 — CVSS 4.8 (medium): The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2024-10903 — CVSS 4.7 (medium): The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow…
• CVE-2014-125105 — CVSS 2.4 (low): A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this…