WordPress Plugin Vulnerabilities

Shortlinks by Pretty Links <= 2.1.9 - Stored XSS and CSV Injection

Description

Details in the reference

Affects Plugins

Plugin icon
pretty-link
Fixed in 2.1.10

References

CVE
CVE-2019-25147
URL
https://blog.nintechnet.com/stored-xss-and-csv-injection-vulnerabilities-in-wordpress-shortlinks-by-pretty-links-plugin/

Miscellaneous

Original Researcher
Jerome Bruandet (nintechnet.com)
Verified
No
WPVDB ID
fae257da-dd57-4da7-a926-ecdbd52624c2

Timeline

Publicly Published
2019-06-19 (about 6 years ago)
Added
2019-06-19 (about 6 years ago)
Last Updated
2023-06-08 (about 2 years ago)

Other

Published
Title
Published
2014-08-01
Title
IWantOneButton 3.0.1 - Multiple Vulnerabilities
Published
2014-08-01
Title
Leaflet Maps Marker - Multiple security issues
Published
2014-08-01
Title
Photoracer <= 1.0 - Multiple Vulnerabilities
Published
2015-05-08
Title
YARPP – Yet Another Related Posts Plugin 4.2.4 - CSRF / XSS / RCE
Published
2015-07-25
Title
Unite Gallery Lite < 1.5 - CSRF & Authenticated SQL Injection