Skip to content
Sign in
4.7 Medium

CVE-2024-10903 The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them,…

Description

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.

Affected products and versions

Product Affected versions Fixed in
Broken Link Checker 2.4 earliest → < 2.4.2 2.4.2

Other CVEs of Broken Link Checker

The 3 CVEs of Broken Link Checker →
CVE-2026-18937 The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input… 9.0 Critical CVE-2022-3922 The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could… 4.8 Medium
Track this CVE