CVE-2015-9468

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.

• CWE-79

• http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.htmlThird Party Advisory
• https://wordpress.org/plugins/broken-link-manager/#developersRelease Notes, Third Party Advisory
• http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.htmlThird Party Advisory
• https://wordpress.org/plugins/broken-link-manager/#developersRelease Notes, Third Party Advisory

Published

Oct 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-9462The awesome-filterable-portfolio plugin before 1.9 for WordP…7.2
• CVE-2015-9463The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPr…7.5
• CVE-2015-9464The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 …7.5
• CVE-2015-9465The yet-another-stars-rating plugin before 0.9.1 for WordPre…8.8
• CVE-2015-9466The wti-like-post plugin before 1.4.3 for WordPress has WtiL…9.8
• CVE-2015-9467The broken-link-manager plugin before 0.5.0 for WordPress ha…9.8
• CVE-2015-9469The content-grabber plugin 1.0 for WordPress has XSS via obj…4.8
• CVE-2015-9470The history-collection plugin through 1.1.1 for WordPress ha…7.5
• CVE-2015-9471The dzs-zoomsounds plugin through 2.0 for WordPress has admi…9.8
• CVE-2015-9472The incoming-links plugin before 0.9.10b for WordPress has r…6.1
• CVE-2015-9473The estrutura-basica theme through 2015-09-13 for WordPress …7.5
• CVE-2015-9474The Simpolio theme 1.3.2 for WordPress has insufficient rest…8.8