CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the wp-admin/tools.php?page=view-broken-links s_filter parameter in a search action.

• CWE-79

• http://packetstormsecurity.com/files/154875/WordPress-Broken-Link-Checker-1.11.8-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Oct/31Exploit, Mailing List, Third Party Advisory
• https://wordpress.org/plugins/broken-link-checker/#developersProduct
• https://wpvulndb.com/vulnerabilities/9917Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/154875/WordPress-Broken-Link-Checker-1.11.8-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Oct/31Exploit, Mailing List, Third Party Advisory
• https://wordpress.org/plugins/broken-link-checker/#developersProduct
• https://wpvulndb.com/vulnerabilities/9917Exploit, Third Party Advisory

Published

Oct 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17201FastTrack Admin By Request 6.1.0.0 supports group policies t…7.8
• CVE-2019-17202FastTrack Admin By Request 6.1.0.0 supports group policies t…7.8
• CVE-2019-17203TeamPass 2.1.27.36 allows Stored XSS at the Search page by s…5.4
• CVE-2019-17204TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Kn…5.4
• CVE-2019-17205TeamPass 2.1.27.36 allows Stored XSS by placing a payload in…6.1
• CVE-2019-17206Uncontrolled deserialization of a pickled object in models.p…9.8
• CVE-2019-1721A vulnerability in the phone book feature of Cisco Expresswa…6.5
• CVE-2019-17210A denial-of-service issue was discovered in the MQTT library…7.5
• CVE-2019-17211An integer overflow was discovered in the CoAP library in Ar…9.8
• CVE-2019-17212Buffer overflows were discovered in the CoAP library in Arm …9.8
• CVE-2019-17213The WebARX plugin 1.3.0 for WordPress has unauthenticated st…6.1
• CVE-2019-17214The WebARX plugin 1.3.0 for WordPress allows firewall bypass…7.5