Vulnerabilities

TI-2024-05379 CVE-2024-5802 · GHSA-83m5-8929-p3h9

URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS

LOW 27

The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00403 Published 2024-07-09 No fix listed CWE-79

TI-2023-09695 CVE-2023-23896 · GHSA-4mmp-hx5j-xw4g

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access Control

LOW 39

Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00521 Published 2024-01-17 No fix listed CWE-862

TI-2023-14308 CVE-2023-30472 · GHSA-cg6v-wpwr-8v26

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin <= 1.0.17 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00379 Published 2023-09-27 No fix listed CWE-79

Vulnerabilities

Filters

URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access Control

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)