This vulnerability (CVE-2025-67962) in the Broken Link Checker plugin allows SQL Injection due to improper neutralization of special elements in SQL commands. It affects versions up to 1.2.6. The CVSS 3.1 score is 7.6, indicating high severity, with network attack vector, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. No patch or remediation details are provided in the source data.

An attacker with high privileges can exploit this SQL Injection vulnerability to access sensitive data (high confidentiality impact) and cause a limited denial of service (low availability impact). Integrity is not impacted. Since exploitation requires high privileges, the risk is somewhat mitigated by the need for elevated access. No known active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin and monitor for suspicious activity. Avoid exposing administrative interfaces publicly. Follow vendor updates closely for patches or official mitigation instructions.