Url Shortify (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-12-15. Vendor: Unknown.

CVEs of Url Shortify

• CVE-2025-12684 - CVSS 7.1 (high), 2025-12-15: The URL Shortify WordPress plugin before 1.11.3 does not sanitize and escape a parameter before outputting it back in the page, leading to a reflected cross…
• CVE-2025-13355 - CVSS 7.1 (high), 2025-12-15: The URL Shortify WordPress plugin before 1.11.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2023-5605 - CVSS 4.8 (medium), 2023-11-06: The URL Shortify WordPress plugin before 1.7.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2023-4294 - CVSS 6.1 (medium), 2023-09-11: The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject…
• CVE-2023-3129 - CVSS 4.8 (medium), 2023-07-10: The URL Shortify WordPress plugin before 1.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…