Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: rupok98 Clear all filters
TI-2025-09830 CVE-2025-10738 · GHSA-45hc-fj2h-6926

URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injection

Priority MEDIUM 49

The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to SQL Injection via the ‘analytic_id’ parameter in all versions up to, and including, 3.0.7 due to insufficient escaping on the user supplied par…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00412 Published 2025-12-13 No fix listed CWE-89
TI-2025-09831 CVE-2025-10740 · GHSA-xwgc-fx9q-hg8x

URL Shortener Plugin For WordPress <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Link Manipulation

Priority LOW 28

The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifyRequest function in all versions up to,…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00267 Published 2025-10-24 No fix listed CWE-89