Now officially on WordPress.org

CVE Database / CVE-2024-10903

CVE · Medium

CVE-2024-10903 — Broken Link Checker [broken-link-checker] < 2.4.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-10903 Broken Link Checker [broken-link-checker] < 2.4.2 Server-Side Request Forgery (SSRF) Medium 4.7 < 2.4.2 2.4.2 2024-12-05 —

CVE-2024-10903

The Broken Link Checker plugin for WordPress through version 2.4.1 contains a server-side request forgery vulnerability that allows administrators and higher-privileged users to send HTTP requests to any destination from the server, potentially enabling them to access or manipulate internal services. This flaw requires authenticated administrator-level access to exploit. The vulnerability was fixed in version 2.4.2.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings