Plugin security history

Broken Link Checker Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 12 vulnerability records associated with Broken Link Checker, published between 2014 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

12Total records

0Critical

2High

10Medium

0Low

0Informational

12Patched records

0Currently marked unpatched

2014-12-05First disclosure

2026-03-26Latest disclosure

12 of 12CVE coverage

Use this history

Check and watch Broken Link Checker.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Check my installed version Watch Broken Link Checker

Year-by-Year Timeline

Year	Records	Relative volume
2014	1	1 records
2015	2	2 records
2019	2	2 records
2022	2	2 records
2024	3	3 records
2025	1	1 records
2026	1	1 records

Severity Breakdown

Severity	Records	Share
High	2	16.7%
Medium	10	83.3%

Vulnerability-Type Breakdown

Cross-Site Scripting

8 records66.7%

First: 2014. Latest: 2024.

Other

2 records16.7%

First: 2022. Latest: 2024.

Missing Authorization

1 record8.3%

First: 2025. Latest: 2025.

SQL Injection

1 record8.3%

First: 2026. Latest: 2026.

Patch Status

Patched: 12
Currently marked unpatched: 0
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

2.4.8
2.4.5
2.4.2
2.4.1
2.2.4
1.11.20
1.11.17
1.11.9
1.10.9
1.10.6
1.10.2

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-2.4.7`	Broken Link Checker <= 2.4.7 - Authenticated (Editor+) SQL Injection	March 26, 2026	2.4.8	Medium
`*-2.4.4`	Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View	June 2, 2025	2.4.5	Medium
`*-2.4.1`	Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery	December 5, 2024	2.4.2	Medium
`*-2.4.0`	Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting	September 30, 2024	2.4.1	High
`*-2.2.3`	Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings	February 12, 2024	2.2.4	Medium
`*-1.11.19`	Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting	November 11, 2022	1.11.20	Medium
`*-1.11.16`	Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization	July 18, 2022	1.11.17	High
`[*, 1.11.9)`	Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting	October 15, 2019	1.11.9	Medium
`[*, 1.11.9)`	Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting	October 14, 2019	1.11.9	Medium
`[*, 1.10.9)`	Broken Link Checker <= 1.10.8 - Cross-Site Scripting	June 29, 2015	1.10.9	Medium
`[*, 1.10.6)`	Broken Link Checker < 1.10.6 - Reflected Cross Site Scripting	April 20, 2015	1.10.6	Medium
`[*, 1.10.2)`	Broken Link Checker < 1.10.2 - Authenticated (Admin+) Stored Cross-Site Scripting	December 5, 2014	1.10.2	Medium

Selected source records

Latest Records

MediumCVE-2026-39466

Broken Link Checker <= 2.4.7 - Authenticated (Editor+) SQL Injection

Published: March 26, 2026

Affected versions: *-2.4.7
Patched versions: 2.4.8

Original Wordfence record

MediumCVE-2025-4047

Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View

Published: June 2, 2025

Affected versions: *-2.4.4
Patched versions: 2.4.5

Original Wordfence record

MediumCVE-2024-10903

Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery

Published: December 5, 2024

Affected versions: *-2.4.1
Patched versions: 2.4.2

Original Wordfence record

HighCVE-2024-8981

Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting

Published: September 30, 2024

Affected versions: *-2.4.0
Patched versions: 2.4.1

Original Wordfence record

MediumCVE-2024-25592

Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings

Published: February 12, 2024

Affected versions: *-2.2.3
Patched versions: 2.2.4

Original Wordfence record

MediumCVE-2022-3922

Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

Published: November 11, 2022

Affected versions: *-1.11.19
Patched versions: 1.11.20

Original Wordfence record

HighCVE-2022-2438

Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization

Published: July 18, 2022

Affected versions: *-1.11.16
Patched versions: 1.11.17

Original Wordfence record

MediumCVE-2019-16521

Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting

Published: October 15, 2019

Affected versions: [*, 1.11.9)
Patched versions: 1.11.9

Original Wordfence record

Highest-Severity Records

HighCVE-2022-2438

Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization

Published: July 18, 2022

Affected versions: *-1.11.16
Patched versions: 1.11.17

Original Wordfence record

HighCVE-2024-8981

Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting

Published: September 30, 2024

Affected versions: *-2.4.0
Patched versions: 2.4.1

Original Wordfence record

MediumCVE-2015-5057

Broken Link Checker <= 1.10.8 - Cross-Site Scripting

Published: June 29, 2015

Affected versions: [*, 1.10.9)
Patched versions: 1.10.9

Original Wordfence record

MediumCVE-2019-16521

Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting

Published: October 15, 2019

Affected versions: [*, 1.11.9)
Patched versions: 1.11.9

Original Wordfence record

MediumCVE-2024-10903

Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery

Published: December 5, 2024

Affected versions: *-2.4.1
Patched versions: 2.4.2

Original Wordfence record

MediumCVE-2014-125105

Broken Link Checker < 1.10.2 - Authenticated (Admin+) Stored Cross-Site Scripting

Published: December 5, 2014

Affected versions: [*, 1.10.2)
Patched versions: 1.10.2

Original Wordfence record

MediumCVE-2022-3922

Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

Published: November 11, 2022

Affected versions: *-1.11.19
Patched versions: 1.11.20

Original Wordfence record

MediumCVE-2019-17207

Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting

Published: October 14, 2019

Affected versions: [*, 1.11.9)
Patched versions: 1.11.9

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory