What’s Vulnerable › Products

URL Shortify vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your URL Shortify version is affected

Latest URL Shortify vulnerabilities

• CVE-2026-73362 — WordPress URL Shortify plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-25385 — WordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.5)
• CVE-2025-13355 — URL Shortify < 1.11.4 - Reflected XSS (CVSS 7.1)
• CVE-2025-12684 — URL Shortify < 1.11.3 - Reflected XSS (CVSS 7.1)
• CVE-2025-32134 — WordPress URL Shortify Plugin <= 1.10.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2023-5605 — URL Shortify < 1.7.9.1 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2023-4294 — URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header (CVSS 6.1)
• CVE-2023-3129 — URL Shortify < 1.7.0 - Admin+ Cross Site Scripting (CVSS 4.8)
• CVE-2021-24749 — URL Shortify < 1.5.1 - Arbitrary Link/Group Deletion via CSRF (CVSS 4.3)