CVE-2026-0813

Name of the Vulnerable Software and Affected Versions Short Link plugin for WordPress versions prior to 1.1

Description The Short Link plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping related to the short link post title and short link page title parameters. Authenticated attackers with administrator-level access or higher can inject arbitrary web scripts into pages. These scripts will execute when a user accesses the affected page.

Recommendations Update the Short Link plugin to version 1.1 or later.