WP Pocket URLs

WP Pocket URLs has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for WP Pocket URLs has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. WP Pocket URLs is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.0.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all WP Pocket URLs vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-51681

WP Pocket URLs <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
WP Pocket URLs banner
Latestv1.0.4

WP Pocket URLs

CodeRevolution

Author

CodeRevolution

5.0(2)
100/100
Last Updated
2026-01-13 (8mo ago)
Active Installs
70+
Downloads
3,995
Requires WP
4.0.0+
Requires PHP
5.2.4+
Tested up to
WP 6.9.0
Created
2020-08-13 (6y ago)

WP Pocket URLs gives you the ability to shorten your long affiliate links and keep track of user clicks on each link. It can get geo information about the user that clicked the link, example: IP address, Country, Date and Time. From the “Reports” settings page of the plugin, you will be able to generate reports and filter by Link Title, Month/Year, Link category OR country. Tutorial video: ** Quick Links ** Join our Facebook Group, a community of WordPress automation enthusiasts Subscribe to CodeRevolution’s YouTube Channel for tutorials, news and updates for my plugins Buy me a coffee Features of WP Pocket URLs plugin: Automatically shorten external links from your website. Manually shorten any link from your website. Custom redirection type: 301, 302, 303, 307 and JavaScript redirection. Categorize your links. Custom permalink prefix support e.g: (go, out, visit, etc.). Custom permalinks e.g : www.coderevolution.ro/visit/link-category-slug/link-slug. Ability to track link clicks, each time a visitor clicks on any link, the plugin will be able to get visitor information like (IP address, click date/time, Country and more). Generate user click reports with options to filter the report. Options to disable collecting of data on link redirection (it will make redirection much faster by counting just clicks/hits without any user data). Top 10 links dashboard widget. Option to exclude link category slug from permalink. If you have any question or features request, please access the plugin’s official support forum. You can also get help from CodeRevolution’s Facebook group.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C