← CVE Intelligence

CVE-2026-97316

Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass PUBLISHED

Description (CNA)

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services.

Affected (CNA)

Vendor / productVersions
Unknown / Broken Link Notifieraffected 1.3.1 before 2.0.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.