CVE-2024-25592

MEDIUM 4.8CVE-2024-25592 · Published 15/03/2024 · updated 17/06/2026

In short

CVE-2024-25592 is a MEDIUM (CVSS 4.8) vulnerability affecting broken link checker (wpmudev).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.4% of all vulnerabilities.
Fix: update to 2.2.4 or later.

Package	Affected versions	Patched versions
broken link checker wpmudev	`< 2.2.4`	`2.2.4`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Broken Link Checker allows Stored XSS.This issue affects Broken Link Checker: from n/a through 2.2.3.

References

patchstack.com/database/vulnerability/broken-link-checker/wordpress-broken-link-checker-plugin-2-2-3-cross-site-scripting-xss-vulnerability · Third Party Advisory

CVE-2024-25592

In short

Description

References

More vulnerabilities in broken link checker

CVE-2024-25592

In short

Description

References

More vulnerabilities in broken link checker