TI-2025-00682 CVE-2025-0809 · GHSA-7whw-5h5g-gmvc
Link Fixer <= 3.4 - Unauthenticated Stored Cross-Site Scripting
Priority LOW 38
The Link Fixer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via broken links in all versions up to, and including, 3.4 due to insufficient input sanitization and output escaping.