plugin

Mihdan No External Links Vulnerabilities

2 known security issues reported for the Mihdan No External Links WordPress plugin. Most recent disclosed Sep 22, 2025.

2 medium

Running Mihdan No External Links on your site? Check whether your installed version is affected.

Scan your site free

No External Links <= 5.1.6.2 - Cross-Site Request Forgery

medium

The No External Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they c...

CVSS:
4.3
Affected:
up to 5.1.6.2
Fixed in:
5.1.7
Disclosed:
Sep 22, 2025

CVE-2025-53451 on NVD →

Mihdan: No External Links <= 4.7.4 - Cross-Site Scripting

medium

The Mihdan: No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including 4.7.4. This makes it possible for admin level attackers to inject arbitrary web scripts on web pages that execute whenever another administrator accesses the page. This...

CVSS:
5.5
Affected:
up to 4.7.4
Fixed in:
4.8.0
Disclosed:
May 27, 2022

CVE-2022-1095 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database