Simple Urls
Approved changes feed: RSS · Atom
cpe:2.3:a:getlasso:simple_urls:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Getlasso (0f8fcd45-5f04-590f-877e-24285961dbdf) |
|---|---|
| Product | Simple Urls (44c03aac-ec5a-578c-8ff3-5c7a019f6278) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45606 |
vulnerable | 2026-06-08 06:12:42.906582 |
WordPress Simple URLs Plugin <= 120 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <= 120 versions.
Published: 2023-10-16T08:29:08.932Z
Updated: 2026-04-28T16:08:43.354Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40674 |
vulnerable | 2026-06-08 06:11:04.197127 |
WordPress Simple URLs Plugin <= 118 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management: from n/a through 118.
Published: 2023-11-30T12:24:39.287Z
Updated: 2026-04-28T16:08:37.206Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40667 |
vulnerable | 2026-06-08 06:11:04.181078 |
WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lasso Simple URLs plugin <= 117 versions.
Published: 2023-09-27T06:40:05.376Z
Updated: 2026-04-28T16:08:37.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0099 |
vulnerable | 2026-06-08 05:52:04.280168 |
Simple URLs < 115 - Multiple Reflected XSS
The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2023-02-13T14:32:05.647Z
Updated: 2025-02-13T16:38:42.562Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0098 |
vulnerable | 2026-06-08 05:52:04.279616 |
Simple URLs < 115 - Subscriber+ SQLi
The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.
Published: 2023-02-13T14:32:15.988Z
Updated: 2025-03-21T19:29:51.689Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.