Broken Link Notifier
Broken Link Notifier has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Improper Neutralization Of Formula Elements In A CSV File, behind 1 of the records (33%). Other recurring categories include Missing Authorization, Server-Side Request Forgery (SSRF).
Every one of the 3 issues recorded for Broken Link Notifier has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (2) reported by Jonas Benjamin Friedli. Broken Link Notifier is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-6851Broken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery
Read the full analysisVulnerability Records
Broken Link Notifier
Author
PluginRx
The “Broken Link Notifier” WordPress plugin is a vigilant guardian for your website’s links, monitoring and alerting you to broken or dead links as users visit your site. This ensures a seamless user experience and helps prevent search engine ranking penalties. Unlike other broken link checker plugins that can cause performance and timeout issues with full site scans, this plugin focuses on notification, making it a great complement to offsite services that handle full site scans. This plugin: Scans content when users visit a page after the page fully loads, preventing performance lag Identifies broken links, including 404 errors, timeouts, images, and embedded YouTube videos Notifies you via dashboard notifications, email, Discord, Slack and/or Microsoft Teams Provides a list of broken links for easy review and correction Allows easy replacement of links straight from the results page (NEW with Version 1.2.0) Caches working (good) links to skip rechecking them for a configurable amount of time (NEW with Version 1.2.5) With “Broken Link Notifier”, you can: Ensure accurate and functional links for your users Prevent search engines from indexing broken links Maintain a professional and trustworthy website image Save time and effort in manual link checking Scan multiple pages at a time on the back-end from your WP List Tables Improve performance by caching successful link checks (optional) This plugin is a must-have for website owners, developers, and SEO enthusiasts who want to guarantee a smooth and error-free browsing experience for their audience! IF THIS PLUGIN FLAGS SOME LINKS AS BROKEN WHEN THEY ARE NOT, PLEASE READ THE FAQ BELOW Demo
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C