PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links

Уязвимости

• CVE-2022-47149без авторизации · нужен клик≤ 3.4.0

  WordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2015-9457высокие права

  The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.

  Высокий 7.2

• CVE-2024-29770без авторизации · нужен клик≤ 3.6.2

  WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2019-25147без авторизации→ 2.1.10

  Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

  Средний 6.1

• CVE-2026-5062админ≤ 3.6.20

  PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  Средний 4.9

• CVE-2024-2326без авторизации · нужен клик≤ 3.6.3

  Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update

  Средний 4.3

• CVE-2025-48247нужен вход≤ 3.6.15

  WordPress Shortlinks by Pretty Links plugin <= 3.6.15 - Broken Access Control Vulnerability

  Средний 4.3

• CVE-2013-1636

  Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite

  Средний 4.3

• CVE-2011-5192

  Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to

  Средний 4.3

• CVE-2011-5191

  Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to

  Средний 4.3