PatchTheCVEurl shortener vulnerabilities and fixes
Recent CVEs affecting url shortener, with upgrade or downgrade steps. 3 tracked.
Also searched as: urlshortener.
url shortener has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-07-09. Highest priority: CVE-2023-30472 (score 33/100).
- CVE-2024-5802 MEDIUM 4.8 UPGRADE The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings,
- CVE-2023-30472 HIGH 7.1 UPGRADE Unauth
- CVE-2023-23896 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shorten
FAQ
How do I fix url shortener vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is url shortener being exploited right now?
None of the tracked url shortener CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which url shortener CVE should I patch first?
CVE-2023-30472 currently ranks highest (33/100): Unauth.