GCVE - cpe:2.3:a:pretty_url_project:pretty

Approved changes feed: RSS · Atom

cpe:2.3:a:pretty_url_project:pretty_url:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Pretty Url Project (`29a693f5-a8ab-5d01-ae7d-18d6845320e7`)
Product	Pretty Url (`d7c6a804-ae4a-58d0-834a-5a26eeb05ec2`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-2009`	vulnerable	2026-06-08 06:02:41.210372	Pretty Url <= 1.5.4 - Admin+ Stored XSS in plugin settings Plugin does not sanitize and escape the URL field in the Pretty Url WordPress plugin through 1.5.4 settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Published: 2023-05-15T12:15:42.265Z Updated: 2025-01-14T18:25:26.460Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/f7988a18-ba9d-4ead-82c8-30ea8223846f	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.