MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed)
unknown
[en] Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.
- Affected:
- up to 4.0
- Fix:
- No patched version reported
- Disclosed:
- Oct 12, 2023
CVE-2023-23737 on NVD →
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
critical
The MainWP Broken Link Checker plugin for WordPress is vulnerable to SQL Injection via several parameters in versions up to, and including, 4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers t...
- CVSS:
- 9.8
- Affected:
- up to 4.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 18, 2023
CVE-2023-23737 on NVD →
MainWP (Various extensions) - Cross-Site Request Forgery
high
Several MainWP extensions for WordPress are vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to invoke functions normally intended for higher-privileged users such as administrators via forged request granted they can trick a sit...
- CVSS:
- 8.8
- Affected:
- up to 4.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 18, 2023
MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed + closed)
unknown
Several MainWP extensions for WordPress are vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to invoke functions normally intended for higher-privileged users such as administrators via forged request granted they can trick a sit...
- Affected:
- up to 4.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 18, 2023
MainWP Broken Link Checker <= 4.0 - Missing Authorization to Arbitrary Plugin Activation
medium
The MainWP Broken Link Checker plugin for WordPress is vulnerable to authorization bypass in versions up to, and including 4.0 due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to activate arbitrary plugins.
- CVSS:
- 5.4
- Affected:
- up to 4.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 17, 2023
MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed)
unknown
The MainWP Broken Link Checker plugin for WordPress is vulnerable to authorization bypass in versions up to, and including 4.0 due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to activate arbitrary plugins.
- Affected:
- up to 4.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 17, 2023
MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed)
unknown
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
- Affected:
- up to 4.0
- Fix:
- No patched version reported
CVE-2023-23736 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database