Now officially on WordPress.org

CVE Database / CVE-2026-39466

CVE · High

CVE-2026-39466 — Broken Link Checker [broken-link-checker] < 2.4.8

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-39466 Broken Link Checker [broken-link-checker] < 2.4.8 — High 7.6 < 2.4.8 2.4.8 2026-03-26 —

CVE-2026-39466

Authenticated users with at least editor privileges in WordPress installations using Broken Link Checker plugin versions 2.4.7 or earlier are susceptible to unauthorized database query manipulation due to inadequate parameter sanitization and insufficient modification of pre-existing SQL commands. This vulnerability allows attackers to inject malicious SQL code, potentially leading to sensitive data exposure.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings