What this plugin does

• Slug: pretty-link
• Author: Blair Williams
• 200000+ active installs
• 96/100 rating (1317 reviews on wordpress.org)
• 10172746 all-time downloads
• On WordPress.org since 2009-03-29

affiliate linkslink cloakinglink managementlink trackingurl shortener

Maintenance status

• Latest known version: 4.0.15
• Last updated: 2026-08-05 8:47pm GMT
• Tested up to WordPress: 7.0.4
• Requires PHP: 7.4+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

11 known CVEs on file for Pretty Link. Reported between 2011 and 2026.

+ 13 more known vulnerabilities

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
—	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.6.1	—	Unknown	< 1.6.1	1.6.1	2016-07-07	✓ fixed in latest
—	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.6.8	—	Unknown	< 1.6.8	1.6.8	2015-11-22	✓ fixed in latest
CVE-2015-9457	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.6.8	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	High 7.2	< 1.6.8	1.6.8	2015-07-08	✓ fixed in latest
CVE-2013-1636	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.6.3	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Unknown	< 1.6.3	1.6.3	2014-03-12	✓ fixed in latest
—	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.6.4	—	Unknown	< 1.6.4	1.6.4	2013-02-20	✓ fixed in latest
—	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.5.3	—	Unknown	< 1.5.3	1.5.3	2012-05-15	✓ fixed in latest
CVE-2011-5192	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.5.6	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Unknown	< 1.5.6	1.5.6	2012-01-06	✓ fixed in latest
CVE-2011-5191	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.5.4	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Unknown	< 1.5.4	1.5.4	2011-12-12	✓ fixed in latest
—	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.4.6	—	Unknown	< 1.4.6	1.4.6	2011-10-13	✓ fixed in latest
—	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] <= 1.4.56	—	Unknown	< 1.4.56	1.4.56	2011-06-27	✓ fixed in latest
—	PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.6.1	—	Unknown	< 1.6.1	1.6.1	—	✓ fixed in latest
CVE-2011-4595	Pretty Link Lite <= 1.5.3 - Cross-Site Scripting (XSS)	—	Unknown	< 1.5.4	1.5.4	—	✓ fixed in latest
—	Pretty Link Lite <= 1.6.0 - Cross-Site Scripting (XSS)	—	Unknown	< 1.6.1	1.6.1	—	✓ fixed in latest

How to fix it

Keep Pretty Link updated — 4.0.15 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

• ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin — 30000+ active installs — 92/100 (251) — max PHP 8.4
• BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP — 20000+ active installs — 96/100 (85) — max PHP 8.4
• URL Shortify – Simple and Easy URL Shortener — 10000+ active installs — 94/100 (164) — max PHP 8.4
• Content Egg – Affiliate Product Importer & Price Comparison — 10000+ active installs — 78/100 (54)
• AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking — 9000+ active installs — 90/100 (34)