CVE-2026-84772
Received Received - Intake

Editor SSRF in Broken Link Checker <= 2.4.14

Publication date: 2026-09-02

Last updated on: 2026-09-02

Assigner: Patchstack

Description
Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-02
Last Modified
2026-09-02
Generated
2026-09-02
AI Q&A
2026-09-02
EPSS Evaluated
N/A
NVD
CVE-2026-84772
EUVD
EUVD-2026-69940

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
broken_link_checker broken_link_checker to 2.4.14 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server Side Request Forgery (SSRF) flaw in the WordPress Broken Link Checker Plugin versions 2.4.14 and below. It allows attackers to trick the website into making requests to arbitrary domains, potentially exposing sensitive information from other services on the system.

Detection Guidance

Detecting this SSRF vulnerability requires checking if the Broken Link Checker plugin version 2.4.14 or below is installed. Inspect WordPress plugin files for the plugin directory named 'broken-link-checker' and verify the version in the plugin header. Look for unusual outbound requests from the server to external domains.

Impact Analysis

The SSRF vulnerability could allow attackers to access internal services or sensitive data on your server. While the CVSS score is 5.5 (low severity), it may lead to information disclosure if exploited. Users should update to version 2.4.14.1 or seek assistance from a hosting provider.

Mitigation Strategies

Immediately update the Broken Link Checker plugin to version 2.4.14.1 or later. If updating is not possible, disable the plugin temporarily or seek assistance from a hosting provider or web developer to apply mitigations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84772. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart