Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Pretty Links Clear all filters
TI-2024-19546 CVE-2024-29770 · GHSA-3j2m-c7pf-qmrp

WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pretty Links Shortlinks by Pretty Links allows Reflected XSS.This issue affects Shortlinks by Pretty Links: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00418 Published 2024-03-27 No fix listed CWE-79
TI-2019-15250 CVE-2019-25147 · GHSA-4r26-5226-443f

Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

Priority LOW 39

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and o…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00749 Published 2023-06-07 Fixed in 2.1.10 CWE-79