TI-2026-28437 CVE-2026-39463 · GHSA-4382-xwj4-x54p
WordPress ManageWP Worker plugin <= 4.9.31 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions.
Vulnerabilities
9 records
TI-2026-03208 CVE-2026-3718 · GHSA-vfvf-2h2w-cj9j
ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header
Priority LOW 37
The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31.
TI-2024-10107 CVE-2024-10903 · GHSA-7jjg-gm2c-94v7
Broken Link Checker < 2.4.2 - Admin+ SSRF
Priority MEDIUM 55
The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.
TI-2023-09550 CVE-2023-23737 · GHSA-9vph-3jrp-5jwh
WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection
Priority MEDIUM 49
Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.
TI-2014-08405 CVE-2014-125105 · GHSA-5crm-f6x3-hr2w
Broken Link Checker Plugin Settings Page core.php options_page cross site scripting
Priority LOW 28
A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress.
TI-2022-03597 CVE-2022-3922 · GHSA-r8w3-884p-p4g2
Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting
Priority MEDIUM 55
The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the…
TI-2022-02252 CVE-2022-2438 · GHSA-3pxc-92w9-cmx7
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Priority LOW 37
The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up to, and including 1.11.16.
TI-2019-12827 CVE-2019-17207 · GHSA-hqfm-wmm2-p7vf
A reflected XSS vulnerability was found in includes/admin/table-printer.php in the…
Priority LOW 28
A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress.
TI-2019-12386 CVE-2019-16521 · GHSA-48cc-3r5m-2jp3
The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is…
Priority LOW 30
The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML.