Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links [broken-link-checker-seo] <= 1.2.6 (unfixed)
unknown
[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AIOSEO Plugin Team Broken Link Checker broken-link-checker-seo allows SQL Injection.This issue affects Broken Link Checker: from n/a through <= 1.2.6.
- Affected:
- up to 1.2.6
- Fix:
- No patched version reported
- Disclosed:
- Dec 16, 2025
CVE-2025-67962 on NVD →
Broken Link Checker <= 1.2.6 - Authenticated (Author+) SQL Injection
medium
The Broken Link Checker plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and a...
- CVSS:
- 6.5
- Affected:
- up to 1.2.6
- Fixed in:
- 1.2.7
- Disclosed:
- Dec 9, 2025
CVE-2025-67962 on NVD →
Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links [broken-link-checker-seo] < 1.2.6
unknown
[en] The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization in all versions up to, and including, 1.2.5. This is due to the plugin registering a REST API endpoint that only checks for a broad ca...
- Affected:
- up to 1.2.6
- Fixed in:
- 1.2.6
- Disclosed:
- Nov 18, 2025
CVE-2025-11734 on NVD →
Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links <= 1.2.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Trashing
medium
The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization in all versions up to, and including, 1.2.5. This is due to the plugin registering a REST API endpoint that only checks for a broad capabil...
- CVSS:
- 5.4
- Affected:
- up to 1.2.5
- Fixed in:
- 1.2.6
- Disclosed:
- Nov 17, 2025
CVE-2025-11734 on NVD →
Broken Link Checker by AIOSEO <= 1.2.3 - Authenticated (Contributor+) SQL Injection
medium
The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to SQL Injection via the 'orderBy' parameter in all versions up to, and including, 1.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...
- CVSS:
- 6.5
- Affected:
- up to 1.2.3
- Fixed in:
- 1.2.4
- Disclosed:
- Apr 5, 2025
CVE-2025-1264 on NVD →
Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links [broken-link-checker-seo] < 1.2.4
unknown
- Affected:
- up to 1.2.4
- Fixed in:
- 1.2.4
CVE-2025-1264 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database