Pretty Url

Pretty Url has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, most of them (2) reported by thiennv. Pretty Url is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

4.9/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Pretty Url vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-22563

Pretty Url <= 1.5.4 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

3 records


2025-01-07 00:00	Pretty Url <= 1.5.4 - Reflected Cross-Site Scripting Pretty Url <= 1.5.4	`CVE-2025-22564`	6.1 Medium	thiennv	Yes
2025-01-07 00:00	Pretty Url <= 1.5.4 - Cross-Site Request Forgery Pretty Url <= 1.5.4	`CVE-2025-22563`	4.3 Medium	thiennv	No
2023-04-18 00:00	Pretty Url < 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting Pretty Url < 1.5.5	`CVE-2023-2009`	4.4 Medium	Shezad Master	Yes

Showing 1–3 of 3 reports

Latestv1.5.5

Pretty Url

Author

faaiq

5.0(1)

100/100

Last Updated

2025-06-18 (1y ago)

Active Installs

80+

Downloads

11,845

Requires WP

3.4+

Requires PHP

Tested up to

WP 6.8.8

Created

2012-06-30 (14y ago)

Description: Pretty URLs is a powerful WordPress plugin that lets you create clean, SEO-optimized custom URLs for any content type — including Posts, Pages, Categories, and Custom Post Types. Features: * Define custom SEO-friendly URLs for Posts, Pages, Categories, and Custom Post Types * Add custom Meta Titles, Meta Descriptions, and Meta Keywords * Control search engine behavior with NOFOLLOW and NOINDEX tags * Enable or disable meta tags individually for full flexibility * Supports archive pages, single posts, and taxonomy terms Boost your site’s search engine visibility and gain complete control over how your content appears in search results — without needing to touch your theme or core files. Installation: 1. Upload the prettyurl plugin folder to your /wp-content/plugins/ directory 2. Activate the plugin via the Plugins menu in your WordPress admin 3. Navigate to “Pretty URLs” in the admin menu to create and manage custom URLs for categories and post type archive pages 4. For single posts, pages, and custom post types, a “Pretty URL” meta box will be available on the edit screen 5. For support or customizations, contact: [scriptut.com] contact page Arbitrary section 1

View on WordPress.org