PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links

Güvenlik açıkları

• CVE-2022-47149kimlik doğrulamasız · tıklama gerekir≤ 3.4.0

  WordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2015-9457yüksek yetki

  The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.

  Yüksek 7.2

• CVE-2024-29770kimlik doğrulamasız · tıklama gerekir≤ 3.6.2

  WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2019-25147kimlik doğrulamasız→ 2.1.10

  Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

  Orta 6.1

• CVE-2026-5062yönetici≤ 3.6.20

  PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  Orta 4.9

• CVE-2024-2326kimlik doğrulamasız · tıklama gerekir≤ 3.6.3

  Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update

  Orta 4.3

• CVE-2025-48247giriş gerekir≤ 3.6.15

  WordPress Shortlinks by Pretty Links plugin <= 3.6.15 - Broken Access Control Vulnerability

  Orta 4.3

• CVE-2013-1636

  Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite

  Orta 4.3

• CVE-2011-5192

  Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to

  Orta 4.3

• CVE-2011-5191

  Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to

  Orta 4.3