plugin

Mainwp Broken Links Checker Extension Vulnerabilities

7 known security issues reported for the Mainwp Broken Links Checker Extension WordPress plugin. Most recent disclosed Oct 12, 2023.

1 critical 1 high 1 medium

Running Mainwp Broken Links Checker Extension on your site? Check whether your installed version is affected.

Scan your site free

MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed)

unknown

[en] Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.

Affected:
up to 4.0
Fix:
No patched version reported
Disclosed:
Oct 12, 2023

CVE-2023-23737 on NVD →

MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection

critical

The MainWP Broken Link Checker plugin for WordPress is vulnerable to SQL Injection via several parameters in versions up to, and including, 4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers t...

CVSS:
9.8
Affected:
up to 4.0
Fix:
No patched version reported
Disclosed:
Jan 18, 2023

CVE-2023-23737 on NVD →

MainWP (Various extensions) - Cross-Site Request Forgery

high

Several MainWP extensions for WordPress are vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to invoke functions normally intended for higher-privileged users such as administrators via forged request granted they can trick a sit...

CVSS:
8.8
Affected:
up to 4.0
Fix:
No patched version reported
Disclosed:
Jan 18, 2023

MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed + closed)

unknown

Several MainWP extensions for WordPress are vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to invoke functions normally intended for higher-privileged users such as administrators via forged request granted they can trick a sit...

Affected:
up to 4.0
Fix:
No patched version reported
Disclosed:
Jan 18, 2023

MainWP Broken Link Checker <= 4.0 - Missing Authorization to Arbitrary Plugin Activation

medium

The MainWP Broken Link Checker plugin for WordPress is vulnerable to authorization bypass in versions up to, and including 4.0 due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to activate arbitrary plugins.

CVSS:
5.4
Affected:
up to 4.0
Fix:
No patched version reported
Disclosed:
Jan 17, 2023

MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed)

unknown

The MainWP Broken Link Checker plugin for WordPress is vulnerable to authorization bypass in versions up to, and including 4.0 due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to activate arbitrary plugins.

Affected:
up to 4.0
Fix:
No patched version reported
Disclosed:
Jan 17, 2023

MainWP Broken Link Checker [mainwp-broken-links-checker-extension] <= 4.0 (unfixed)

unknown

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:
up to 4.0
Fix:
No patched version reported

CVE-2023-23736 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database