Kaizencoders Short Url — known CVE vulnerabilities

Every CVE whose affected-product data names Kaizencoders Short Url, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-2921 — CVSS 8.8 (high): The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to…
• CVE-2022-46860 — CVSS 8.5 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaizenCoders Short URL allows SQL…
• CVE-2024-32138 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Short URL allows…
• CVE-2023-3130 — CVSS 4.8 (medium): The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such…
• CVE-2023-1602 — CVSS 4.4 (medium): The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input…
• CVE-2023-45058 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions.