Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: PluginRx Clear all filters
TI-2026-20526 CVE-2026-25408 · GHSA-2h8x-f6wg-4f5c

WordPress Broken Link Notifier plugin <= 1.3.5 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00241 Published 2026-02-19 No fix listed CWE-862
TI-2025-06225 CVE-2025-6851 · GHSA-x4vc-m5g5-663m

Broken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery

Priority LOW 39

The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() fun…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00718 Published 2025-07-11 No fix listed CWE-918