Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 09:55:39 +0000 CVE-2026-18937 — Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection https://db.gcve.eu/vuln/cve-2026-18937 <p><strong>Affected:</strong> Unknown Broken Link Checker</p> <p>The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic (non-block) is active.</p> <p><strong>Affected:</strong> Unknown Broken Link Checker</p> <p>The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic (non-block) is active.</p> https://db.gcve.eu/vuln/cve-2026-18937