170 matches found
CVE-2025-28963
Server-Side Request Forgery SSRF vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a through = 3.0.7...
WordPress URL Shortener plugin <= 3.0.7 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by ch4r0n in WordPress Plugin URL Shortener versions = 3.0.7...
CVE-2025-28963
Server-Side Request Forgery SSRF vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a through = 3.0.7...
CVE-2025-28963 WordPress URL Shortener plugin <= 3.0.7 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a through = 3.0.7...
CVE-2025-28963
CVE-2025-28963 is a Server-Side Request Forgery (SSRF) in the WordPress URL Shortener plugin (versions
PT-2025-27878 · Unknown · Md Yeasin Ul Haider Url Shortener
Name of the Vulnerable Software and Affected Versions: Md Yeasin Ul Haider URL Shortener versions 3.0.7 and earlier Description: The issue is related to a Server Side Request Forgery SSRF problem, which allows for Server Side Request Forgery. No information is provided about the estimated number ...
WordPress plugin URL Shortener 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2025-6064
The WP URL Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the 'urlshortenersettings' page. This makes it possible for unauthenticated attackers to update settings and...
CVE-2025-6064
CVE-2025-6064 affects the WP URL Shortener WordPress plugin (versions ≤ 1.2). Root cause: missing/incorrect nonce validation on the url_shortener_settings page enabling CSRF. Exploitation: unauthenticated attackers could forge requests to update settings and inject scripts if a site admin is tric...
WordPress WP URL Shortener plugin <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin WP URL Shortener versions = 1.2...
WordPress plugin WP URL Shortener 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
PT-2025-25481 · WordPress · Url Shortener
Name of the Vulnerable Software and Affected Versions: WP URL Shortener plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'url shortener settings' page. This allows...
CVE-2025-30629
Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...
CVE-2025-30629
Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...
CVE-2025-30629 WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...
CVE-2025-30629 WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...
CVE-2025-30629
CVE-2025-30629 is a CSRF vulnerability in Codehaveli Bitly URL Shortener (WordPress plugin) affecting versions up to 1.3.3. Public details confirm CSRF as the issue, with CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) base score 4.3 (Medium). Connected sources (Wordfence, Red Hat) list the vulner...
WordPress plugin Bitly URL Shortener 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-24149 · Codehaveli · Codehaveli Bitly Url Shortener
Name of the Vulnerable Software and Affected Versions: Codehaveli Bitly URL Shortener versions 1.3.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For Codehaveli Bitly URL Shortener versions 1.3...
WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Bitly URL Shortener versions = 1.4.1...