Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-12629

Broken Link Manager <= 0.6.5 - Reflected XSS

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
K-78 Wordpress
Products
Broken Link Manager Wordpress
CVE-2015-9468

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
K-78
Products
Broken Link Manager
CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
K-78
Products
Broken Link Manager
CVE-2015-9453

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
K-78
Products
Broken Link Manager