bitlydeveloper

Products

ProductCVEsExploitedLatest
Bitly's WordPress Plugin2–Jan 9, 2025
Bitly1–Sep 22, 2025

Exploited and recent CVEs

  • CVE-2025-58231 Medium 6.5 WordPress Bitly plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-12616 Medium 4.3 Bitly's WordPress Plugin <= 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.3%
  • CVE-2023-5577 Medium 6.4 Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%