Short Url Security Vulnerabilities and Issues — Short Url CVE List

Lucene search

Short UrlShort Url

3 matches found

CVE•added 2025/06/06 6:15 a.m.•66 views

CVE-2023-2921

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers.

8.8CVSS7.6AI score0.00039EPSS

CVE•added 2023/07/31 10:15 a.m.•46 views

CVE-2023-3130

The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

4.8CVSS4.9AI score0.00107EPSS

CVE•added 2006/12/11 5:28 p.m.•34 views

CVE-2006-6460

Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509.

10CVSS6.1AI score0.00869EPSS