2024

2023

2022

2021

2020

2019

2018

2017

CVE-2017-15992 (v3: 9.8) 31 Oct 2017
Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

2016

2015

CVE-2015-9467 (v3: 9.8) 10 Oct 2019
The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.