Lucene search
+L

170 matches found

RedhatCVE
RedhatCVE
added 2025/07/06 9:7 a.m.13 views

CVE-2025-28963

Server-Side Request Forgery SSRF vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a through = 3.0.7...

5.4CVSS5.9AI score0.00161EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/07/04 10:17 a.m.9 views

WordPress URL Shortener plugin <= 3.0.7 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by ch4r0n in WordPress Plugin URL Shortener versions = 3.0.7...

5.4CVSS6.7AI score0.00161EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/07/04 9:15 a.m.6 views

CVE-2025-28963

Server-Side Request Forgery SSRF vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a through = 3.0.7...

5.4CVSS0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/04 8:42 a.m.18 views

CVE-2025-28963 WordPress URL Shortener plugin <= 3.0.7 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a through = 3.0.7...

5.4CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/04 8:42 a.m.23 views

CVE-2025-28963

CVE-2025-28963 is a Server-Side Request Forgery (SSRF) in the WordPress URL Shortener plugin (versions

5.4CVSS5.9AI score0.00161EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/04 12:0 a.m.6 views

PT-2025-27878 · Unknown · Md Yeasin Ul Haider Url Shortener

Name of the Vulnerable Software and Affected Versions: Md Yeasin Ul Haider URL Shortener versions 3.0.7 and earlier Description: The issue is related to a Server Side Request Forgery SSRF problem, which allows for Server Side Request Forgery. No information is provided about the estimated number ...

5.4CVSS6.3AI score0.00161EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/04 12:0 a.m.7 views

WordPress plugin URL Shortener 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability...

5.4CVSS6.8AI score0.00161EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/14 9:15 a.m.11 views

CVE-2025-6064

The WP URL Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the 'urlshortenersettings' page. This makes it possible for unauthenticated attackers to update settings and...

6.1CVSS0.00117EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/14 8:23 a.m.42 views

CVE-2025-6064

CVE-2025-6064 affects the WP URL Shortener WordPress plugin (versions ≤ 1.2). Root cause: missing/incorrect nonce validation on the url_shortener_settings page enabling CSRF. Exploitation: unauthenticated attackers could forge requests to update settings and inject scripts if a site admin is tric...

6.1CVSS5.9AI score0.00117EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/06/14 6:14 a.m.7 views

WordPress WP URL Shortener plugin <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin WP URL Shortener versions = 1.2...

6.1CVSS5.8AI score0.00117EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/06/14 12:0 a.m.3 views

WordPress plugin WP URL Shortener 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

6.1CVSS6.2AI score0.00117EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/06/14 12:0 a.m.7 views

PT-2025-25481 · WordPress · Url Shortener

Name of the Vulnerable Software and Affected Versions: WP URL Shortener plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'url shortener settings' page. This allows...

6.1CVSS6.1AI score0.00117EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/06/08 1:19 p.m.17 views

CVE-2025-30629

Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/06 1:15 p.m.10 views

CVE-2025-30629

Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...

4.3CVSS0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/06 12:54 p.m.32 views

CVE-2025-30629 WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...

4.3CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 12:54 p.m.6 views

CVE-2025-30629 WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/06 12:54 p.m.50 views

CVE-2025-30629

CVE-2025-30629 is a CSRF vulnerability in Codehaveli Bitly URL Shortener (WordPress plugin) affecting versions up to 1.3.3. Public details confirm CSRF as the issue, with CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) base score 4.3 (Medium). Connected sources (Wordfence, Red Hat) list the vulner...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.7 views

WordPress plugin Bitly URL Shortener 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS4.9AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.6 views

PT-2025-24149 · Codehaveli · Codehaveli Bitly Url Shortener

Name of the Vulnerable Software and Affected Versions: Codehaveli Bitly URL Shortener versions 1.3.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For Codehaveli Bitly URL Shortener versions 1.3...

4.3CVSS4.4AI score0.0014EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/06/05 1:27 a.m.13 views

WordPress Bitly URL Shortener plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Bitly URL Shortener versions = 1.4.1...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder