0mk Shortener Project

0mk Shortener

2 vulnerabilities found.

Please note: This list may be incomplete. Data is provided in its original format, subject to change.
4.8

CVE-2022-45361

  • EPSS 0.39%
  • Published 23.04.2023 10:15:07
  • Last modified 21.11.2024 07:29:06

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Boris Kuzmanov 0mk Shortener plugin <= 0.2 versions.

5.4

CVE-2022-2933

Exploit
  • EPSS 0.51%
  • Published 06.02.2023 19:15:09
  • Last modified 08.04.2026 18:17:26

The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the zeromk_options_page function. This makes it possible for unauthentic...