WordPress plugin
Bitly URL Shortener security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
1Known vulnerabilities
- Critical0
- High0
- Medium1
- Low0
All Bitly URL Shortener vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery ≤1.4.1Update to 1.5.0 | CVE-2025-30629 |
- Medium4.3Cross-Site Request Forgery
≤1.4.1Update to 1.5.0
Bitly URL Shortener: common questions
Does Bitly URL Shortener have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Bitly URL Shortener: 1 medium. None are known to affect version null.
How do I check which version of Bitly URL Shortener I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Bitly URL Shortener vulnerability?
CVE-2025-30629, published Jun 5, 2025: Bitly URL Shortener <= 1.4.1 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any Bitly URL Shortener vulnerability listed in CISA KEV?
No. None of the known Bitly URL Shortener vulnerabilities is currently listed in the CISA KEV catalog.