Broken Link Checker WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Broken Link Checker plugin for WordPress, allowing unauthorized data access. This issue arises from a lack of capability checks in the 'ajax_full_status' and 'ajax_dashboard_status' functions, affecting all versions up to and including 2.4.4. As a result, authenticated attackers with Subscriber-level access or higher can view the plugin's status on the dashboard.

Impact

Exploitation of this vulnerability allows authenticated users with Subscriber-level access and above to access and view plugin status information that should be restricted.

Remediation

Users can update to Broken Link Checker version 2.4.5 or a newer patched version to address this vulnerability.