Simple Urls
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:simple_urls:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Simple Urls (71904cdc-4960-54ce-ae25-3a8c33e1bb55) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-0099 |
vulnerable | 2026-06-08 05:52:04.279989 |
Simple URLs < 115 - Multiple Reflected XSS
The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2023-02-13T14:32:05.647Z
Updated: 2025-02-13T16:38:42.562Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0098 |
vulnerable | 2026-06-08 05:52:04.278816 |
Simple URLs < 115 - Subscriber+ SQLi
The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.
Published: 2023-02-13T14:32:15.988Z
Updated: 2025-03-21T19:29:51.689Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.