CVE-2026-102389
CVE-2026-102389 · WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1.
CVSS 6.5 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
broken link checker
- Versions
- ≥ 0, ≤ 2.4.14.1: Affected; ≥ 2.4.15: Not affected (custom)
Update to 2.4.15