KaizenCoders

10 results · Clear filters · Feed

• Medium 6.1
  CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

  bPlugins webfactory unitecms nicheaddons Web / CMS
  May 1, 2026
• Medium 4.7
  CVE-2026-25392

  WordPress Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress plugin <= 1.4.0 - Open Redirection vulnerability

  URL Redirection to Untrusted Site ('Open Redirect') vulnerability in KaizenCoders Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress update-urls allows Phishing.This issue affects Update URLs – Quick and Easy way…

  KaizenCoders Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress Web / CMS
  Feb 19, 2026
• Medium 5.5
  CVE-2026-25385

  WordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerability

  Server-Side Request Forgery (SSRF) vulnerability in KaizenCoders URL Shortify url-shortify allows Server Side Request Forgery.This issue affects URL Shortify: from n/a through <= 1.12.3.

  KaizenCoders URL Shortify
  Feb 19, 2026
• Medium 4.7
  CVE-2026-1277 Public exploit Scanner template

  URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter

  The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in the promotional dismissal handler. This makes it possible for unauthenticated at…

  KaizenCoders URL Shortify – Simple and Easy URL Shortener Web / CMS
  Feb 18, 2026
• Medium 6.1
  CVE-2025-12581

  Attachments Handler <= 1.1.7 - Reflected Cross-Site Scripting

  The Attachments Handler plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t…

  KaizenCoders Attachments Handler Web / CMS
  Dec 20, 2025
• Medium 5.9
  CVE-2025-32134

  WordPress URL Shortify Plugin <= 1.10.5.1 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders URL Shortify url-shortify allows Stored XSS.This issue affects URL Shortify: from n/a through <= 1.10.5.1.

  KaizenCoders URL Shortify
  Apr 4, 2025
• Medium 5.4
  CVE-2023-47225

  WordPress Short URL plugin <= 1.6.8 - Broken Access Control vulnerability

  Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Short URL: from n/a through <= 1.6.8.

  KaizenCoders Short URL
  Jan 2, 2025
• Medium 4.7
  CVE-2023-1604

  Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page

  The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8. This is due to missing or incorrect nonce validation on the configuration_page function. This makes it possible for unauthenticated attacke…

  KaizenCoders Short URL Web / CMS
  Aug 17, 2024
• Medium 4.3
  CVE-2023-45058

  WordPress Short URL Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions.

  KaizenCoders Short URL
  Oct 12, 2023
• Medium 4.4
  CVE-2023-1602

  The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insu…

  KaizenCoders Short URL Web / CMS
  Jun 29, 2023