CVE-2024-10903: Broken Link Checker < 2.4.2 - Admin+ SSRF
Description
The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.
Classification
CVE ID: CVE-2024-10903
Affected Products
Vendor: Unknown
Product: Broken Link Checker
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.48% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)