CVE-2026-97316

Published: Set 30, 2026 Last Modified: Set 30, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services.

https://wpscan.com/vulnerability/d9497ddd-c39c-4928-8660-f1…
https://wpscan.com/vulnerability/d9497ddd-c39c-4928-8660-f1c94ef2c3a0/