bitlydeveloper
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Bitly's WordPress Plugin | 2 | – | Jan 9, 2025 |
| Bitly | 1 | – | Sep 22, 2025 |
Exploited and recent CVEs
- CVE-2025-58231 WordPress Bitly plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-12616 Bitly's WordPress Plugin <= 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.3%
- CVE-2023-5577 Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%