How severe is CVE-2026-5062?

Medium severity. CVSS v3 base score is 4.9 out of 10.

SQL Injection in Supercleanse Prettylinks – Affiliate Link Management, Url Shortener, Cloaking, Tracking & Branded Short Links

CVE-2026-5062

The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection via the 's' (search) parameter on the Pretty Links listing page in all versions up to…

Vulnerability class: SQL Injection

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Supercleanse Prettylinks – Affiliate Link Management, Url Shortener, Cloaking, Tracking & Branded Short Links — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

Frequently asked questions

What is CVE-2026-5062?: CVE-2026-5062 is a medium-severity vulnerability in Supercleanse Prettylinks – Affiliate Link Management, Url Shortener, Cloaking, Tracking & Branded Short Links, classified under SQL Injection. CVSS score: 4.9/10. Published 2026-08-05.
How severe is CVE-2026-5062?: Medium severity. CVSS v3 base score is 4.9 out of 10.