Kaizencoders

Short Url

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-2921

Exploit
  • EPSS 0.08%
  • Veröffentlicht 06.06.2025 06:00:05
  • Zuletzt bearbeitet 10.06.2025 19:31:20

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers.

5.4

CVE-2023-47225

  • EPSS 0.11%
  • Veröffentlicht 02.01.2025 12:15:15
  • Zuletzt bearbeitet 02.01.2025 12:15:15

Missing Authorization vulnerability in KaizenCoders Short URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Short URL: from n/a through 1.6.8.

4.7

CVE-2023-1604

  • EPSS 0.33%
  • Veröffentlicht 17.08.2024 08:15:05
  • Zuletzt bearbeitet 19.08.2024 13:00:23

The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8. This is due to missing or incorrect nonce validation on the configuration_page function. This makes it possible for unauthenticate...

6.1

CVE-2024-32138

  • EPSS 0.18%
  • Veröffentlicht 15.04.2024 07:15:09
  • Zuletzt bearbeitet 02.04.2025 18:09:57

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Short URL allows Reflected XSS.This issue affects Short URL: from n/a through 1.6.8.

9.8

CVE-2022-46860

  • EPSS 0.21%
  • Veröffentlicht 06.11.2023 08:15:21
  • Zuletzt bearbeitet 21.11.2024 07:31:11

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaizenCoders Short URL allows SQL Injection.This issue affects Short URL: from n/a through 1.6.4.

8.8

CVE-2023-45058

  • EPSS 0.09%
  • Veröffentlicht 12.10.2023 13:15:10
  • Zuletzt bearbeitet 21.11.2024 08:26:18

Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions.

4.8

CVE-2023-3130

Exploit
  • EPSS 0.12%
  • Veröffentlicht 31.07.2023 10:15:10
  • Zuletzt bearbeitet 21.11.2024 08:16:31

The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed ...

4.8

CVE-2023-1602

  • EPSS 0.37%
  • Veröffentlicht 29.06.2023 02:15:15
  • Zuletzt bearbeitet 21.11.2024 07:39:31

The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output escaping in versions up to, and including, 1.6.4. This makes it possible for authenticated a...