Medium · 4.3 CVE-2022-47149 EUVD-2022-49924GHSA-pc55-vcp3-jp9v

WordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Pretty Links Product: Pretty Links

Description

Cross-Site Request Forgery (CSRF) vulnerability in Pretty Links plugin <= 3.4.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Pretty Links	Pretty Links	≤ 3.4.0	—

References

https://patchstack.com/database/vulnerability/pretty-link/wordpress-pretty-links-affiliate-links-link-branding-link-tracking-marketing-plugin-plugin-3-4-0-cross-site-request-forgery-csrf?_s_id=cve vdb-entry