K-78

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

K-78 records in CISA KEV

No K-78 vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Broken Link Manager · all components

TI-2015-07844 CVE-2015-9467 · GHSA-wqp5-wj3h-2543

MEDIUM 47

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0239 Published 2019-10-10 No fix listed CWE-89

TI-2015-07830 CVE-2015-9453 · GHSA-q39r-q5p2-pf8g

LOW 30

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01545 Published 2019-10-07 No fix listed CWE-79

TI-2015-07845 CVE-2015-9468 · GHSA-8x2j-3g63-w69p

LOW 29

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00985 Published 2019-10-10 No fix listed CWE-79