Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filtersBroken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log
Broken Link Checker < 2.4.12 - Unauthenticated Remote Code Execution
Broken Link Checker <= 2.4.7 - Authenticated (Editor+) SQL Injection
Broken Link Checker <= 1.2.6 - Authenticated (Author+) SQL Injection
Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links <= 1.2.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Trashing
Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View
Broken Link Checker by AIOSEO <= 1.2.3 - Authenticated (Contributor+) SQL Injection
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Cross-Site Request Forgery
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery
Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting
Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Broken Link Checker for YouTube <= 1.3 - Cross-Site Request Forgery via plugin_settings_page()
Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting
Broken Link Checker <= 1.10.8 - Cross-Site Scripting
Broken Link Checker < 1.10.6 - Reflected Cross Site Scripting
Broken Link Checker < 1.10.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.