Known vulnerabilities in Broken Link Checker

Broken Link Checker helps you catch broken links & images fast, before they hurt your SEO or UX. Scan and bulk-fix issues from one easy dashboard.

14Reported vulnerabilities

9.8Highest CVSS score

2.4.13Latest version

500,000+Active installs

What to do now

Update Broken Link Checker to 2.4.13.1 or later. 14 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2019-16521	Medium 6.1	1.4%	1.11.8 and earlier	`1.11.9`	October 16, 2019
CVE-2026-18937	Critical 9.8	0.4%	Before 2.4.12	`2.4.12`	August 21, 2026
CVE-2019-17207	Medium 5.4	1.6%	1.11.8 and earlier	`1.11.9`	October 18, 2019
CVE-2022-3922	Medium 4.8	0.5%	Before 1.11.20	`1.11.20`	December 28, 2022
CVE-2024-10903	Medium 4.7	0.4%	Before 2.4.2	`2.4.2`	December 26, 2024
CVE-2022-2438	High 7.2	1.8%	Before 1.11.17	`1.11.17`	September 6, 2022
CVE-2026-39466	High 7.6	0.3%	0 to 2.4.7 (inclusive)	`2.4.8`	April 8, 2026
CVE-2026-75528	High 7.2	0.3%	0 to 2.4.13 (inclusive)	`2.4.13.1`	September 2, 2026
CVE-2024-8981	High 7.1	0.5%	0 to 2.4.0 (inclusive)	`2.4.1`	October 1, 2024
CVE-2015-5057	Medium 6.1	1.5%	1.10.8 and earlier	`1.10.9`	August 18, 2017
CVE-2014-125105	Medium 6.1	0.5%	1.10.1 and earlier	`1.10.2`	June 5, 2023
CVE-2015-10098	Medium 6.1	0.6%	Before 1.10.6	`1.10.6`	April 8, 2023
CVE-2024-25592	Medium 4.4	0.3%	2.2.3 and earlier	`2.2.4`	February 12, 2024
CVE-2025-4047	Medium 4.3	0.3%	0 to 2.4.4 (inclusive)	`2.4.5`	June 3, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.