Medium · 5.4 CVE-2023-23896 EUVD-2023-27979GHSA-4mmp-hx5j-xw4g

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access Control

Published Jan 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mythemeshop Product: URL Shortener by MyThemeShop

Description

Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17.

Affected products

Vendor	Product	Affected	Fixed
MyThemeShop	URL Shortener by MyThemeShop	≤ 1.0.17	—

References

https://patchstack.com/database/vulnerability/mts-url-shortener/wordpress-url-shortener-by-mythemeshop-plugin-1-0-16-broken-access-control-vulnerability?_s_id=cve vdb-entry