Short URL, 49c452abea504abdd9ab5237225200824ba8be46

CVE, Research URL: 49c452abea504abdd9ab5237225200824ba8be46
Home page URL: Security reports for Short URL
Application: Short URL
Published on: Jul 31, 2023
Research Description: Short URL [shorten-url] < 1.6.8 (closed) Short URL <= 1.6.7 - Missing Authorization via multiple AJAX functions The Short URL plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 1.6.7. This makes it possible for authenticated attackers such as subscribers to validate, reset, and delete links.
Affected versions: max 1.6.8.
Status: vulnerable