CVE-2024-10903

4.7 mediumEPSS 0.4%

Medium (4.7) in managewp broken link checker. EPSS 0.4% chance of exploitation in the next 30 days.

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.

Severity

CVSS 3.1

4.7 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2024-12-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

managewp:broken_link_checker

References

https://wpscan.com/vulnerability/39027390-ce01-4dd5-a979-426785aa7acb/
https://wpscan.com/vulnerability/39027390-ce01-4dd5-a979-426785aa7acb/

Check your stack JSON