Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: tahminajannat Clear all filters
TI-2025-01168 CVE-2025-1363 · GHSA-p2v5-rvqj-c2xc

easy-broken-link-checker <= 9.0.2 - Admin+ Stored XSS

Priority MEDIUM 50

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.0032 Published 2025-03-09 No fix listed CWE-79
TI-2025-01167 CVE-2025-1362 · GHSA-9wv3-p38x-5wqv

easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

Priority MEDIUM 53

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted acti…

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00169 Published 2025-03-09 No fix listed CWE-352
TI-2024-12889 CVE-2024-13868 · GHSA-qjcx-8429-2j74

Easy Broken Link Checker <= 9.0.2 - Reflected XSS

Priority MEDIUM 60

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scriptin…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00323 Published 2025-03-06 No fix listed CWE-79
TI-2025-17556 CVE-2025-23789 · GHSA-qhqv-7h9v-g7hm

WordPress URL Shortener WooCommerce Plugin <= 9.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tahminajannat URL Shortener | Conversion Tracking | AB Testing | WooCommerce easy-broken-link-checker allows Reflected…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0025 Published 2025-02-14 No fix listed CWE-79
TI-2025-17448 CVE-2025-23681 · GHSA-f226-gv22-gg2h

WordPress REDIRECTION PLUS plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tahminajannat REDIRECTION PLUS redirection-plus allows Reflected XSS.This issue affects REDIRECTION PLUS: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00386 Published 2025-01-22 No fix listed CWE-79