Kaizencoders
17 CVEs across 11 Kaizencoders products. Browse Kaizencoders vulnerabilities, severities, and proof-of-concept exploits.
Kaizencoders products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13362 | Medium | 6.1 | 2026-05-01 | Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp… |
CVE-2026-25392 | Medium | 4.7 | 2026-02-19 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in KaizenCoders Update URLs – Quick and Easy way to search old links and replace them with ne… |
CVE-2026-25385 | Medium | 5.5 | 2026-02-19 | Server-Side Request Forgery (SSRF) vulnerability in KaizenCoders URL Shortify url-shortify allows Server Side Request Forgery.This issue affects URL Shortify… |
CVE-2026-1277 | Medium | 4.7 | 2026-02-18 | The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redire… |
CVE-2025-12581 | Medium | 6.1 | 2025-12-20 | The Attachments Handler plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 1.1.7 due to insuffi… |
CVE-2025-58860 | High | 7.1 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through <… |
CVE-2025-58857 | High | 7.1 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Table of content content-table allows Stored… |
CVE-2023-2921 | High | 8.8 | 2025-06-06 | The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exp… |
CVE-2025-32632 | High | 7.1 | 2025-04-11 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Automatic Ban IP automatic-ban-ip allows Ref… |
CVE-2025-32134 | Medium | 5.9 | 2025-04-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders URL Shortify url-shortify allows Stored XSS… |
CVE-2023-47225 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2022-4974 | Medium | 6.3 | 2024-10-16 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to… |
CVE-2023-1604 | Medium | 4.7 | 2024-08-17 | The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8. This is due to missing or incorrect non… |
CVE-2024-7485 | High | 7.2 | 2024-08-06 | The Traffic Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in the 'UserWebStat' AJAX function in all versio… |
CVE-2024-32138 | High | 7.1 | 2024-04-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Short URL allows Reflected XSS.This issue af… |
CVE-2023-5605 | Medium | 4.8 | 2023-11-06 | The URL Shortify WordPress plugin before 1.7.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per… |
CVE-2022-46860 | High | 8.5 | 2023-11-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaizenCoders Short URL allows SQL Injection.This issue af… |
CVE-2023-45058 | Medium | 4.3 | 2023-10-12 | Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions. |
CVE-2023-4294 | Medium | 6.1 | 2023-09-11 | The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject ma… |
CVE-2023-3130 | Medium | 4.8 | 2023-07-31 | The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-3129 | Medium | 4.8 | 2023-07-10 | The URL Shortify WordPress plugin before 1.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2023-1602 | Medium | 4.4 | 2023-06-29 | The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output e… |
CVE-2021-24749 | Medium | 4.3 | 2021-11-29 | The URL Shortify WordPress plugin before 1.5.1 does not have CSRF check in place when bulk-deleting links or groups, which could allow attackers to make a logg… |