Shortlink by BestWebSoft

Shortlink by BestWebSoft has one disclosed vulnerability in the WordSec catalog, all reported in 2017; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Shortlink by BestWebSoft has a vendor fix available, so running the current release closes it.

All of these findings were reported by Neven Birusk. Shortlink by BestWebSoft is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Shortlink by BestWebSoft vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Shortlink by BestWebSoft < 1.5.3 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Shortlink by BestWebSoft banner
Latestv1.6.2

Shortlink by BestWebSoft

bestweblayout

Author

bestweblayout

3.8(6)
76/100
Last Updated
2025-06-10 (1y ago)
Active Installs
70+
Downloads
21,197
Requires WP
5.6+
Requires PHP
0+
Tested up to
WP 6.3.10
Created
2014-02-21 (13y ago)

Shortlink plugin is a useful tool to get short links from Google URL Shortener service without leaving your WordPress website. Generate short links by direct input and/or automatically. Replace all external links on your website with short links, restore or delete them from database, and manage statistic. Install, activate, and save your time! View Demo Features Firebase Dynamic Links API Automatically generate short links Generate short links by direct output Add unlimited number of fields for direct links input View list of links with additional info: Page URL Short link Number of total clicks Articles that contain link Manage your links manually with the following options: Replace Restore Delete Manage all external links automatically: Scan website for new links Replace Restore Restore all links and clear database Compatible with latest WordPress version Incredibly simple settings for fast setup without modifying code Detailed step-by-step documentation and videos If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! Suggest a Feature Documentation & Videos [Doc] User Guide [Doc] Installation [Doc] Purchase Help & Support Visit our Help Center if you have any questions, our friendly Support Team is happy to help — https://support.bestwebsoft.com/ Translation Russian (ru_RU) Ukrainian (uk) Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send the text of PO and MO files to BestWebSoft and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO files Poedit. Recommended Plugins Updater – Automatically check and update WordPress website core with all installed plugins and themes to the latest versions.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C