PatchTheCVE: k-78https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2015-9468: The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.https://patchthecve.com/cve/CVE-2015-9468.htmlhttps://patchthecve.com/cve/CVE-2015-9468.htmlWed, 17 Jun 2026 00:36:34 +0000MEDIUM 6.1: The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.CVE-2015-9467: The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the https://patchthecve.com/cve/CVE-2015-9467.htmlhttps://patchthecve.com/cve/CVE-2015-9467.htmlWed, 17 Jun 2026 00:36:34 +0000CRITICAL 9.8: The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.CVE-2015-9453: The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header tohttps://patchthecve.com/cve/CVE-2015-9453.htmlhttps://patchthecve.com/cve/CVE-2015-9453.htmlWed, 17 Jun 2026 00:36:32 +0000MEDIUM 6.1: The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.