Vulnerabilities

TI-2015-07845 CVE-2015-9468 · GHSA-8x2j-3g63-w69p

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.

LOW 29

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00985 Published 2019-10-10 No fix listed CWE-79

TI-2015-07844 CVE-2015-9467 · GHSA-wqp5-wj3h-2543

MEDIUM 47

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0239 Published 2019-10-10 No fix listed CWE-89

TI-2015-07830 CVE-2015-9453 · GHSA-q39r-q5p2-pf8g

LOW 30

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01545 Published 2019-10-07 No fix listed CWE-79