Now officially on WordPress.org

CVE Database / CVE-2025-11734

CVE · Medium

CVE-2025-11734 — Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links [broken-link-checker-seo] < 1.2.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-11734 Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links [broken-link-checker-seo] < 1.2.6 Missing Authorization Medium 5.4 < 1.2.6 1.2.6 2025-11-17 —

CVE-2025-11734

The Broken Link Checker plugin for WordPress, developed by AIOSEO, contains a flaw in its REST API functionality that permits unauthorized post modification. Versions prior to 1.2.5 are affected as they fail to verify user permissions when using the aioseo_blc_broken_links_page capability to access and modify posts via the /wp-json/aioseoBrokenLinkChecker/v1/post endpoint, allowing contributors and higher-level users to delete any post.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings