CVE-2024-10903

Publication date

2024-12-26 06:00:05

Family

WPScan

State

PUBLISHED

Description

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.