Security Advisory

CVE-2024-10903

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-12-26 06:00:05

Last updated 2024-12-30 17:13:04

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.

← Browse all CVEs View on cve.org ↗