PatchTheCVE0mk shortener vulnerabilities and fixes
Recent CVEs affecting 0mk shortener, with upgrade or downgrade steps. 2 tracked.
Also searched as: 0mkshortener.
0mk shortener has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-04-23. Highest priority: CVE-2022-2933 (score 35/100).
- CVE-2022-45361 MEDIUM 5.9 UPGRADE Auth
- CVE-2022-2933 MEDIUM 5.4 UPGRADE The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl
FAQ
How do I fix 0mk shortener vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 0mk shortener being exploited right now?
None of the tracked 0mk shortener CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 0mk shortener CVE should I patch first?
CVE-2022-2933 currently ranks highest (35/100): The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl.