Linker – URL shortener & track outbound link clicks
Linker – URL shortener & track outbound link clicks has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Linker – URL shortener & track outbound link clicks has a vendor fix available, so running the current release closes it.
All of these findings were reported by Abdi Pranata. Linker – URL shortener & track outbound link clicks is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2023-47177Linker <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Linker – URL shortener & track outbound link clicks
Author
Elementor
Manage, create and track outbound links by custom pretty links with your domain. Through Linker’s short url tool you can know on which links your visitors are clicking. Linker is the easiest tool to use in order to create a short link in your own domain & track outbound link clicks from your website, using software like Google Analytics. Create short links to your post, manage your 301 redirects, track affiliate links and do many other URL related tasks easily. Major Features Create Short and clean URLs, using your own domain Redirect links to any location, both inbound and outbound, using 301 redirects Track outbound link clicks, with internal reporting for Hits per link Enjoy an intuitive and User Friendly Admin Interface Setup tracking easily using Linker’s out of the box functionality Set URL Parameters forwarding for improved tracking on every redirection How it Works? Linker adds a new custom post type to your Admin menu, where you can create, edit, delete, and manage Links by 301 redirects. What’s great about Linker is that it tracks click counts and saves them as a custom field. it’s really simple & cool and there is no setup involved. It works seamlessly straight out of the box for whichever theme and plugins you are using. Link Example: Just to make it extra clear, here’s how the Linker plugin works. Original URL: https://wordpress.org/plugins/linker/ New URL with Linker: https://pojo.me/go/linker/ Contributions: Would you like to contribute to this plugin? You’re more than welcome to submit your pull requests on the GitHub repo. And, if you have any notes about the code, please open a ticket on the issue tracker.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C