Vulnerabilities

TI-2024-02161 CVE-2024-2326 · GHSA-52p5-x626-gw72

Cross-site request forgery in supercleanse PrettyLinks – Affiliate Links, Link Branding…

LOW 19

The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.3.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00208 Published 2024-03-23 No fix listed CWE-352

TI-2011-03961 CVE-2011-4595 · GHSA-8hr8-h5jx-w7gp

Pretty-Link WordPress plugin 1.5.2 has XSS

LOW 32

Pretty-Link WordPress plugin 1.5.2 has XSS

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02407 Published 2020-01-10 No fix listed CWE-79

TI-2015-07834 CVE-2015-9457 · GHSA-vmp3-xvfh-8xqx

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL…

LOW 35

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01902 Published 2019-10-10 No fix listed CWE-89

TI-2013-01438 CVE-2013-1636 · GHSA-j6f8-7w49-7g29

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka…

LOW 29

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06314 Published 2014-03-12 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery in supercleanse PrettyLinks – Affiliate Links, Link Branding…

Pretty-Link WordPress plugin 1.5.2 has XSS

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL…

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka…