CVE-2015-9457: Caseproof Prettylinks

High severity, CVSS 7.2. EPSS: 1.9% chance of exploitation in the next 30 days.

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.

Affected products

• Caseproof Prettylinks: before 1.6.8 (fixed in 1.6.8)

Published 2019-10-10. Last modified 2026-06-17.