WP Pocket URLs
WP Pocket URLs has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for WP Pocket URLs has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. WP Pocket URLs is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.0.
CVE-2024-51681WP Pocket URLs <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WP Pocket URLs
Author
CodeRevolution
WP Pocket URLs gives you the ability to shorten your long affiliate links and keep track of user clicks on each link. It can get geo information about the user that clicked the link, example: IP address, Country, Date and Time. From the “Reports” settings page of the plugin, you will be able to generate reports and filter by Link Title, Month/Year, Link category OR country. Tutorial video: ** Quick Links ** Join our Facebook Group, a community of WordPress automation enthusiasts Subscribe to CodeRevolution’s YouTube Channel for tutorials, news and updates for my plugins Buy me a coffee Features of WP Pocket URLs plugin: Automatically shorten external links from your website. Manually shorten any link from your website. Custom redirection type: 301, 302, 303, 307 and JavaScript redirection. Categorize your links. Custom permalink prefix support e.g: (go, out, visit, etc.). Custom permalinks e.g : www.coderevolution.ro/visit/link-category-slug/link-slug. Ability to track link clicks, each time a visitor clicks on any link, the plugin will be able to get visitor information like (IP address, click date/time, Country and more). Generate user click reports with options to filter the report. Options to disable collecting of data on link redirection (it will make redirection much faster by counting just clicks/hits without any user data). Top 10 links dashboard widget. Option to exclude link category slug from permalink. If you have any question or features request, please access the plugin’s official support forum. You can also get help from CodeRevolution’s Facebook group.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C