| 2026-10-14 |
WPSEC-2026-0923 |
Broken Link Checker <= 2.4.14.1 - Unauthenticated Authentication Bypass to Scan Report Recipient Removal |
Medium 5.3 |
2.4.15 |
| 2026-10-14 |
WPSEC-2026-0922 |
Broken Link Checker <= 2.4.14.1 - Unauthenticated Sensitive Information Exposure via REST API User Roles Field |
Medium 5.3 |
2.4.15 |
| 2026-10-14 |
WPSEC-2026-0921 |
Broken Link Checker <= 2.4.14.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Truncation and .htaccess Overwrite via Custom Log File Path |
Medium 5.9 |
2.4.15 |
| 2026-10-14 |
WPSEC-2026-0920 |
Broken Link Checker <= 2.4.14.1 - Authenticated (Editor+) Missing Authorization to Broken Link Edit, Unlink and Deredirect |
Low 2.7 |
2.4.15 |
| 2026-10-14 |
WPSEC-2026-0919 |
Broken Link Checker <= 2.4.14.1 - Cross-Site Request Forgery to Scan Data Deletion via Recheck |
Medium 4.3 |
2.4.15 |
| 2026-10-14 |
WPSEC-2026-0918 |
Broken Link Checker <= 2.4.14.1 - Authenticated (Contributor+) PHP Object Injection via SiteOrigin panels_data Post Meta |
High 7.1 |
2.4.15 |
