Read the docs

bitlydeveloper

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

bitlydeveloper records in CISA KEV

No bitlydeveloper vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-36036 CVE-2025-58231 · GHSA-g34w-fj74-mcv3

WordPress Bitly plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bitlydeveloper Bitly wp-bitly allows Stored XSS.This issue affects Bitly: from n/a through <= 2.8.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-22 No fix listed CWE-79
TI-2024-11707 CVE-2024-12616 · GHSA-9gg6-9679-vvjw

Bitly's WordPress Plugin <= 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update

Priority LOW 20

The Bitly&#039;s WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 2.7.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2025-01-09 No fix listed CWE-862
Open these records in search →