Plugin icon

URL Shortify – Simple and Easy URL Shortener

url-shortify

Vulnerabilities:

11

Last Updated:

March 31, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-19
Title
URL Shortify < 1.12.4 - Authenticated (Author+) Server-Side Request Forgery
Fixed in
Fixed in 1.12.4
CVSS
6.4 (medium)
Published
2026-02-17
Title
URL Shortify < 1.12.2 - Unauthenticated Open Redirect via 'redirect_to' Parameter
Fixed in
Fixed in 1.12.2
CVSS
4.7 (medium)
Published
2025-11-24
Title
URL Shortify < 1.11.4 - Reflected XSS
Fixed in
Fixed in 1.11.4
CVSS
7.1 (high)
Published
2025-11-24
Title
URL Shortify < 1.11.3 - Reflected XSS
Fixed in
Fixed in 1.11.3
CVSS
7.1 (high)
Published
2025-04-04
Title
URL Shortify < 1.10.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.10.6
CVSS
4.4 (medium)
Published
2023-10-16
Title
URL Shortify < 1.7.9.1 - Admin+ Stored XSS
Fixed in
Fixed in 1.7.9.1
CVSS
3.5 (low)
Published
2023-08-21
Title
URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header
Fixed in
Fixed in 1.7.6
CVSS
9.6 (critical)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.7.3
CVSS
6.1 (medium)
Published
2023-06-19
Title
URL Shortify < 1.7.0 - Admin+ Cross Site Scripting
Fixed in
Fixed in 1.7.0
CVSS
3.5 (low)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.5.11
CVSS
4.3 (medium)
Published
2021-10-28
Title
URL Shortify < 1.5.1 - Arbitrary Link/Group Deletion via CSRF
Fixed in
Fixed in 1.5.1
CVSS
5.4 (medium)