Plugin icon

PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links

pretty-link

Vulnerabilities:

10

Last Updated:

August 25, 2026

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2026-08-04
Title
PrettyLinks < 3.6.21 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Fixed in
Fixed in 3.6.21
CVSS
4.9 (medium)
Published
2025-05-19
Title
Shortlinks by Pretty Links < 3.6.16 - Missing Authorization
Fixed in
Fixed in 3.6.16
CVSS
4.3 (medium)
Published
2024-03-25
Title
Shortlinks by Pretty Links < 3.6.3 - Reflected Cross-Site Scripting via post_status
Fixed in
Fixed in 3.6.3
CVSS
7.1 (high)
Published
2024-03-22
Title
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing < 3.6.4 - Plugin Settings Update via CSRF
Fixed in
Fixed in 3.6.4
CVSS
4.3 (medium)
Published
2023-04-13
Title
Shortlinks by Pretty Links < 3.4.1 - Link Visit Stats Clear via CSRF
Fixed in
Fixed in 3.4.1
CVSS
4.3 (medium)
Published
2019-06-19
Title
Shortlinks by Pretty Links <= 2.1.9 - Stored XSS and CSV Injection
Fixed in
Fixed in 2.1.10
CVSS
n/a
Published
2015-07-08
Title
Pretty Link Lite <= 1.6.7 - Authenticated SQL Injection
Fixed in
Fixed in 1.6.8
CVSS
7.2 (high)
Published
2014-08-01
Title
Pretty Link Lite <= 1.6.2 - XSS in SWF
Fixed in
Fixed in 1.6.3
CVSS
n/a
Published
2014-08-01
Title
Pretty Link Lite <= 1.6.0 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.6.1
CVSS
n/a
Published
2012-05-15
Title
Pretty Link Lite <= 1.5.3 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.4
CVSS
6.1 (medium)