medium5.8
CVE-2026-97316
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attack…
Impact
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services.
Affected products
| Product | Affected versions |
|---|---|
| Broken Link Notifier WordPress Plugin | before 2.0.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.