Log in Start free

KaizenCoders

Products

ProductCVEsExploitedLatest
Short URL6–Jan 2, 2025
URL Shortify3–Aug 18, 2026
URL Shortify – Simple and Easy URL Shortener2–May 1, 2026
Attachments Handler1–Dec 20, 2025
Traffic Manager1–Aug 6, 2024
Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress1–Feb 19, 2026
Table of content1–Sep 5, 2025
Automatic Ban IP1–Apr 11, 2025
Enable Latex1–Sep 5, 2025

Exploited and recent CVEs

  • CVE-2026-73362 High 7.1 WordPress URL Shortify plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2026-25392 Medium 4.7 WordPress Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress plugin <= 1.4.0 - Open Redirection vulnerability 0.2%
  • CVE-2026-25385 Medium 5.5 WordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2026-1277 Medium 4.7 URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter 0.7%
  • CVE-2025-12581 Medium 6.1 Attachments Handler <= 1.1.7 - Reflected Cross-Site Scripting 0.2%
  • CVE-2025-58860 High 7.1 WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-58857 High 7.1 WordPress Table of content Plugin <= 1.5.3.1 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-32632 High 7.1 WordPress Automatic Ban IP Plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-32134 Medium 5.9 WordPress URL Shortify Plugin <= 1.10.5.1 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-47225 Medium 5.4 WordPress Short URL plugin <= 1.6.8 - Broken Access Control vulnerability 0.4%
  • CVE-2023-1604 Medium 4.7 Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page 0.2%
  • CVE-2024-7485 High 7.2 Traffic Manager <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting 0.4%
  • CVE-2024-32138 High 7.1 WordPress Short URL plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2022-46860 High 8.5 WordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection 0.7%
  • CVE-2023-45058 Medium 4.3 WordPress Short URL Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-1602 Medium 4.4 The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output escaping in versions up to, and including, 0.4%