Short URL vulnerabilities

1 known vulnerability in Short URL from Short URL. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Short URL: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-2921Jun 6, 2025Short URL

  The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers.