Broken Link Checker

by WPMU DEV - Your All-in-One WordPress Platform

View on WordPress.org

91 Quality Score

Active Installs

26/30

With 500,000 active installs, this is one of the most widely adopted link-checking plugins in the WordPress ecosystem.

Update Freshness

25/25

Last updated within days of this assessment and rated for WordPress 7.0, the maintenance signal is as strong as it gets.

User Rating

11/15

A 76 out of 100 from 593 ratings is solid but not stellar, suggesting most users are happy though a notable minority have run into pain points.

Support Health

14/15

11 of 12 support threads resolved, a 91.7% close rate, points to a responsive maintainer who actually engages with issues.

WP Compatibility

15/15

Requires PHP 7.4 and WordPress 5.2 at minimum, which covers the vast majority of installations running a current stack.

Scores higher than 99% of indexed plugins

About

Broken Link Checker helps you catch broken links & images fast, before they hurt your SEO or UX. Scan and bulk-fix issues from one easy dashboard.

Active Installs 500k+

Rating ★★★½ 3.8/5

Last Updated 2026-08-31 8:40am GMT

Requires WordPress 6.2+

Tested Up To 7.1

Requires PHP 7.4+

Security History

15 known vulnerabilities, all patched

1 Critical 3 High 11 Medium

Most recent: September 2, 2026

View details ▸

Broken Link Checker <= 2.4.14 - Authenticated (Editor+) Server-Side Request Forgery Medium

September 2, 2026 Patched in ["2.4.14.1"] CVE-2026-84772

Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log High

September 1, 2026 Patched in ["2.4.13.1"] CVE-2026-75528

Broken Link Checker < 2.4.12 - Unauthenticated Remote Code Execution Critical

August 21, 2026 Patched in ["2.4.12"] CVE-2026-18937

Broken Link Checker <= 2.4.7 - Authenticated (Editor+) SQL Injection Medium

March 26, 2026 Patched in ["2.4.8"] CVE-2026-39466

Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View Medium

June 2, 2025 Patched in ["2.4.5"] CVE-2025-4047

Broken Link Checker <= 2.4.1 - Authenticated (Admin+) Server-Side Request Forgery Medium

December 5, 2024 Patched in ["2.4.2"] CVE-2024-10903

Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting High

September 30, 2024 Patched in ["2.4.1"] CVE-2024-8981

Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings Medium

February 12, 2024 Patched in ["2.2.4"] CVE-2024-25592

Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

November 11, 2022 Patched in ["1.11.20"] CVE-2022-3922

Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization High

July 18, 2022 Patched in ["1.11.17"] CVE-2022-2438

Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting Medium

October 15, 2019 Patched in ["1.11.9"] CVE-2019-16521

Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting Medium

October 14, 2019 Patched in ["1.11.9"] CVE-2019-17207

Broken Link Checker <= 1.10.8 - Cross-Site Scripting Medium

June 29, 2015 Patched in ["1.10.9"] CVE-2015-5057

Broken Link Checker < 1.10.6 - Reflected Cross Site Scripting Medium

April 20, 2015 Patched in ["1.10.6"] CVE-2015-10098

Broken Link Checker < 1.10.2 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

December 5, 2014 Patched in ["1.10.2"] CVE-2014-125105

What It Does

Broken Link Checker scans your WordPress site for dead hyperlinks and broken images, then surfaces them in a dashboard where you can edit, unlink, or redirect problematic URLs in bulk. It also catches missing images and redirected URLs, giving content teams a single place to clean up link rot without running separate crawlers.

Who It's For

This plugin fits content-heavy sites with hundreds or thousands of internal and external links, such as news publishers, blogs, e-commerce stores, and documentation portals where link decay happens regularly. It is also useful for agencies and SEO teams who maintain multiple client sites and need a fast way to audit link health.

Who Should Skip It

If you run a small site with under 50 pages or post infrequently, the constant background crawling will add server overhead without much benefit, and a manual check every few months will do. Sites on resource-constrained shared hosting should also avoid it, since the scanning process can noticeably slow down page loads.

The Bottom Line

Broken Link Checker earns a 90.67 overall quality score and delivers the most complete link-auditing experience available for WordPress, with active maintenance and strong support. The main caveat is server load: on cheap shared hosting the background scans can hurt performance, so weigh that against the genuine SEO value of catching dead links.

Related Plugins

Page Links To 85/100

Pick this instead when your main need is pointing specific pages or posts at custom external URLs rather than scanning for broken ones.

All 404 Redirect to Homepage 84/100

Choose this lighter alternative if you only want to funnel 404 traffic somewhere instead of running a full link audit.

Broken Link Checker by AIOSEO 83/100

Go with this if you already use AIOSEO and want a bundled alternative that fits inside a broader SEO toolkit.

Export All URLs 82/100

Pick this when you mainly need to export your URL list for analysis rather than fix broken links in place.

AutoConvert Greeklish Permalinks 82/100

Choose this only if your specific problem is non-Latin slug transliteration, which is a completely different concern.