Extension WordPress
Vulnérabilités Broken Link Manager
Cette page rassemble les failles publiées pour Broken Link Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Broken Link Manager
5 fiches
Broken Link Manager <= 0.6.5 – Reflected Cross-Site Scripting
The Broken Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 0.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-0.6.5
Non indiqué
03/11/2025
Broken Link Manager <= 0.6.5 – Authenticated (Admin+) SQL Injection
The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue
*-0.6.5
Non indiqué
24/07/2021
Broken Link Manager < 0.6.0 – Cross-Site Scripting
The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.
[*, 0.6.0)
0.6.0
16/07/2015
Broken Link Manager < 0.5.0 – SQL Injection
The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.
[*, 0.5.0)
0.5.0
04/07/2015
Broken Link Manager <= 0.4.5 – Cross-Site Scripting
The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.
*-0.4.5
0.5.0
04/07/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.