Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Md Yeasin Ul Haider Clear all filters
TI-2025-20902 CVE-2025-28959 · GHSA-j6cg-cq59-89f7

WordPress URL Shortener <= 3.0.7 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows SQL Injection.This issue affects URL Shortener: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00435 Published 2025-07-16 No fix listed CWE-89
TI-2025-20904 CVE-2025-28961 · GHSA-6fx8-8w6v-c3c5

WordPress URL Shortener <= 3.0.7 - PHP Object Injection Vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Object Injection.This issue affects URL Shortener: from n/a through <= 3.0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0059 Published 2025-07-16 No fix listed CWE-502
TI-2025-20908 CVE-2025-28965 · GHSA-cfwc-wpq8-wj8r

WordPress URL Shortener <= 3.0.7 - Broken Access Control Vulnerability

Priority MEDIUM 43

Missing Authorization vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects URL Shortener: from n/a through <= 3.0.7.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00373 Published 2025-07-16 No fix listed CWE-862