Bitly URL Shortener

Bitly URL Shortener has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Bitly URL Shortener has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nabil Irawan. Bitly URL Shortener is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Bitly URL Shortener vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-30629

Bitly URL Shortener <= 1.4.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Bitly URL Shortener banner
Latestv1.5.3

Bitly URL Shortener

Codehaveli

Author

Codehaveli

5.0(5)
100/100
Last Updated
2026-08-23 (20d ago)
Active Installs
500+
Downloads
16,403
Requires WP
5.6+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2020-05-26 (6y ago)

Bitly URL Shortener (Previously Codehaveli Bitly URL Shortener) uses the functionality of Bitly API to generate bitly short link automatically from your WordPress dashboard when you publish new post. Bitly URL Shortener allows you to connect your WordPress Website to the Bitly API via access token and Group GUID. Features Generate Bitly link automatically when publishing posts without leaving your site. Share Bitly link from your Post List and Post Edit page with social share buttons. Gutenberg block for displaying social share icons (Facebook, LinkedIn, X/Twitter, Telegram, WhatsApp). Support for Custom Post Types with option to choose from your list of post types. Support for Custom Bitly Domain (for paid Bitly plans). Generate Bitly link of your old posts with just one click from post list. WP-CLI support for bulk generating short links via command line. REST API endpoints for programmatic access to short URL generation. Post column in admin showing generated short URLs. Metabox in post edit page for quick access to short URL and share options. Optimized code with modern PHP 7.4+ features and proper error handling. Terms of Use This is not an official plugin of https://bitly.com This plugin only connects your https://bitly.com account to your WordPress site. Please read privacy and terms of service of Bitly before using this plugin. Bug reports Bug reports for Bitly URL Shortener are welcomed in our Bitly URL Shortener repository on GitHub. Please note that GitHub is not a support forum, and that issues that are not properly qualified as bugs will be closed. Further Reading For more info on Bitly and Codehaveli, check out the following: Codehaveli official homepage Read “How to generate Bitly OAuth access token?” from Codehaveli Blog Bitly API Documentation Follow Codehaveli on Facebook, Instagram & Twitter Plugin GitHub Repository

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C