TI-2025-06225 CVE-2025-6851 · GHSA-x4vc-m5g5-663mBroken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request ForgeryPriority LOW 39The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() fun…CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00718 · Published 2025-07-11 · No fix listed CWE-918