Skip to content
PluginCanary

Broken Link Checker

by WPMU DEV - Your All-in-One WordPress Platform · 500,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 13 Oct 2026, 16 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Broken Link Checker
Ownership100
Maintenance100
Security60
Support100
Reputation70

How the score works

Quick answers

Is Broken Link Checker still maintained?
Yes. Last release 13 Oct 2026, 16 releases in the last 24 months. 13 Oct 2026 · wordpress.org
Who owns Broken Link Checker, and has it changed hands?
No change recorded. Main committer panoslyrakis since Aug 2022. 4 Nov 2026 · SVN log
Was Broken Link Checker removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Broken Link Checker safe?
17 known vulnerabilities, all fixed (latest in 2.4.15). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest Broken Link Checker update safe to install?
No ownership change before 2.4.15. No one-star spike after it. 12 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
freediver5 Aug 2015 to 20 Mar 2019, 17 commits
jdailey5 Nov 2019 to 3 Dec 2019, 3 commits
vanyukov2 Jan 2020 to 18 Jul 2022, 6 commits
bplv5 Feb 2020 to 10 Jun 2020, 5 commits
ivanic24 Aug 2020 to 24 Aug 2020, 2 commits
panoslyrakis16 Aug 2022 to 13 Oct 2026, 68 commits
ricardotbfreitas18 Apr 2023 to 18 Apr 2023, 2 commits

7 committers recorded. No ownership change since 2007.

Maintenance

Last release
22 days ago
Releases, 24 months
16
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Broken Link Checker
Q1 20240
Q2 20240
Q3 20244
Q4 20241
Q1 20250
Q2 20254
Q3 20250
Q4 20251
Q1 20261
Q2 20260
Q3 20268
Q4 20261

Last release 13 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 3.8 (8 reviews). Lifetime: 3.8.

Average rating per quarter for Broken Link Checker
Q2 20255.0
Q3 20254.5
Q4 20252.0
Q1 20263.3
Q2 20263.0
Q3 20263.8
Q4 20261.0

Average rating fell from 5.0 to 1.0 between Q2 2025 and Q4 2026.

Rating distribution
5 star365
4 star45
3 star21
2 star40
1 star134
Latest low reviews

Security record

8 vulnerabilities in 24 months (17 on record), all patched (latest fixed in 2.4.15).

Show 17 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback6.5<= 2.4.14.12.4.15Patched before disclosure
13 Oct 2026Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary HTML Attribute Injection5.3<= 2.4.14.12.4.15Patched before disclosure
2 Sep 2026Broken Link Checker <= 2.4.14 - Authenticated (Editor+) Server-Side Request Forgery5.5<= 2.4.142.4.14.1Patched before disclosure
1 Sep 2026Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log7.2<= 2.4.132.4.13.1Patched before disclosure
21 Aug 2026Broken Link Checker < 2.4.12 - Unauthenticated Remote Code Execution9.8< 2.4.122.4.12Patched before disclosure
26 Mar 2026Broken Link Checker <= 2.4.7 - Authenticated (Editor+) SQL Injection4.9<= 2.4.72.4.8Patched before disclosure
2 Jun 2025Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View4.3<= 2.4.42.4.5Patched before disclosure
5 Dec 2024Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery5.5<= 2.4.12.4.2Patched before disclosure
30 Sep 2024Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting7.1<= 2.4.02.4.11
12 Feb 2024Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings4.4<= 2.2.32.2.4Patched before disclosure
11 Nov 2022Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5<= 1.11.191.11.20Patched before disclosure
18 Jul 2022Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization7.2<= 1.11.161.11.17Patched before disclosure
15 Oct 2019Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting6.1< 1.11.91.11.922
14 Oct 2019Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting5.4< 1.11.91.11.923
29 Jun 2015Broken Link Checker <= 1.10.8 - Cross-Site Scripting6.1< 1.10.91.10.9Patched before disclosure
20 Apr 2015Broken Link Checker < 1.10.6 - Reflected Cross Site Scripting5.3< 1.10.61.10.61
5 Dec 2014Broken Link Checker < 1.10.2 - Authenticated (Admin+) Stored Cross-Site Scripting5.5< 1.10.21.10.2Patched before disclosure

Changelog mentions of security fixes: 2.4.12 (vulnerability); 2.4.13.1 (XSS); 2.4.14.1 (vulnerability).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 7 support threads resolved in the last 2 months.

Momentum

500,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Broken Link Checker
4 May 20268,740
11 May 202617,368
18 May 202616,896
25 May 202616,511
1 Jun 202614,587
8 Jun 202613,984
15 Jun 202613,611
22 Jun 202613,167
29 Jun 202614,547
6 Jul 202612,490
13 Jul 202613,150
20 Jul 202614,558
27 Jul 202612,699
3 Aug 2026653,211
10 Aug 2026316,071
17 Aug 202677,867
24 Aug 2026290,474
31 Aug 2026286,649
7 Sep 202642,609
14 Sep 202650,506
21 Sep 202635,422
28 Sep 202624,283
5 Oct 202620,353
12 Oct 2026263,683
19 Oct 202665,525
26 Oct 202655,473
2 Nov 20264,975

Weekly downloads over the last 4 weeks are 11% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.4.15
AuthorWPMU DEV - Your All-in-One WordPress Platform
Added8 Oct 2007
Last updated13 Oct 2026
Active installs500,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.4
CategorySite Administration & Utilities > URL Redirects & 301 Management
Tagslinks, broken links, broken images, external link, internal link

Other plugins by this author: Smush - Image Optimization, Compression, Lazy Load, WebP & CDN, Forminator Forms - Contact Form, Payment Form & Custom Form Builder, Defender Security - Malware Scanner, Login Security & Firewall, Hustle - Email Marketing, Lead Generation, Optins, Popups, Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN, Beehive Analytics - Google Analytics Dashboard, Branda - White Label & Branding, Free Login Page Customizer, SmartCrawl SEO checker, analyzer & optimizer

Questions

Is Broken Link Checker still maintained?

Yes. Last release 13 Oct 2026, 16 releases in the last 24 months.

Who owns Broken Link Checker, and has it changed hands?

No change recorded. Main committer panoslyrakis since Aug 2022.

Was Broken Link Checker removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Broken Link Checker safe?

17 known vulnerabilities, all fixed (latest in 2.4.15). Not on the exploited list.

Is the latest Broken Link Checker update safe to install?

No ownership change before 2.4.15. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue