URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress, CVE-2025-12684

CVE, Research URL: CVE-2025-12684
Home page URL: Security reports for URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress
Application: URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress
Published on: Dec 15, 2025
Research Description: The URL Shortify WordPress plugin before 1.11.3 does not sanitize and escape a parameter before outputting it back in the page, leading to a reflected cross site scripting, which could be used against high-privilege users such as admins.
Affected versions: max 1.11.3.
Status: vulnerable

URL Shortify &#8211; Simple, Powerful and Easy URL Shortener Plugin For WordPress, CVE-2025-12684