Read the docs

Pretty Links

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Pretty Links records in CISA KEV

No Pretty Links vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pretty Links 1 record LOW

Records

1 record in Pretty Links · all components

TI-2019-15250 CVE-2019-25147 · GHSA-4r26-5226-443f

Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

Priority LOW 39

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and o…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00749 Published 2023-06-07 Fixed in 2.1.10 CWE-79
Open these records in search →