CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through <= 2.4.7.
Explanation of Vulnerability in Simple Terms
The Broken Link Checker plugin for WordPress contains a SQL injection vulnerability in versions up to 2.4.7. An attacker with high-level site privileges can craft malicious input to execute arbitrary SQL queries against the site's database. This could allow unauthorized access to sensitive data stored in the database. The vulnerability requires administrator or equivalent access to exploit.
What an attacker can do
Read or modify data in the WordPress database by injecting SQL commands.
Potential impact on your site
An admin account compromised or acting maliciously could extract or alter database contents, including user credentials and site configuration.
Conditions required to exploit
Attacker must have administrator or high-level user account on the WordPress site.
Key dates
External resources
Related vulnerabilities
