Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: wpdevteam Component: Betterlinks Clear all filters
TI-2023-24134 CVE-2023-45104 · GHSA-3px9-vgqj-48v9

WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability

Priority MEDIUM 44

Missing Authorization vulnerability in WPDeveloper BetterLinks betterlinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterLinks: from n/a through <= 1.6.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00457 Published 2025-01-02 No fix listed CWE-862
TI-2024-34586 CVE-2024-51672 · GHSA-2r6v-v2j7-w3xh

WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects BetterLinks: from n/a through <= 2.1.7.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00465 Published 2024-11-04 No fix listed CWE-89
TI-2021-07094 CVE-2021-24812 · GHSA-4w3h-ggjg-2hvj

BetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting

Priority LOW 25

The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-11-23 Fixed in 1.2.6 CWE-79