URL Shortify – Simple and Easy URL Shortener

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Recent releases and news for this plugin

1. 2026-08-24 Version 2.5.2 Update: Replaced every browser alert in the admin with a standard, dismissible WordPress notice shown next to the control it refers to. This covers the Quick Add widget, custom date ranges on the Dashboard and the Group 2.5.2
2. 2026-08-11 Version 2.5.1 New: Option to restrict a short link to the domain assigned to it, so a link on a custom domain no longer shadows a page using the same slug on your main site. Enable it under Settings > Display Options. PRO New: Setup c 2.5.1
3. 2026-08-03 Version 2.5.0 New: Duplicate short links from the links list page, one at a time or in bulk. The copy keeps every parameter of the original link and gets an automatically generated slug. PRO New: One-click Export / Import to move all 2.5.0
4. 2026-07-10 Version 2.4.3 Update: Small code improvements. 2.4.3
5. 2026-07-10 Version 2.4.2 New: Added support to generate short links in bulk using REST API. PRO 2.4.2
6. 2026-06-04 Version 2.4.1 Fix: Version mismatch issue in the plugin header. 2.4.1

13 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 URL Shortify – Simple and Easy URL Shortener <= 2.5.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-18 CVE-2026-73362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.0 Patched in 2.5.1
2. Medium · 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter ↗
   2026-04-30 CVE-2024-13362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.10.4 Patched in 1.10.5.1
3. Medium · 6.4 URL Shortify <= 1.12.3 - Authenticated (Author+) Server-Side Request Forgery ↗
   2026-02-19 CVE-2026-25385 Server-Side Request Forgery (SSRF) Affects <= 1.12.3 Patched in 1.12.4
4. Medium · 4.7 URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter ↗
   2026-02-17 CVE-2026-1277 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 1.12.1 Patched in 1.12.2
5. Medium · 6.1 URL Shortify <= 1.11.3 - Reflected Cross-Site Scripting ↗
   2025-11-24 CVE-2025-13355 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.11.3 Patched in 1.11.4
6. Medium · 6.1 URL Shortify <= 1.11.2 - Reflected Cross-Site Scripting ↗
   2025-11-24 CVE-2025-12684 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.11.2 Patched in 1.11.3
7. Medium · 4.4 URL Shortify <= 1.10.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-04-04 CVE-2025-32134 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.10.5.1 Patched in 1.10.6
8. Medium · 4.4 URL Shortify <= 1.7.9 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2023-11-16 CVE-2023-5605 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.9 Patched in 1.7.9.1
9. High · 7.2 URL Shortify <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via Referrer Header ↗
   2023-08-21 CVE-2023-4294 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.5 Patched in 1.7.6
10. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 1.0.1 - 1.7.2 Patched in 1.7.3
11. Medium · 4.4 URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress <= 1.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-06-19 CVE-2023-3129 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.7.0 Patched in 1.7.0
12. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.5.11 Patched in 1.5.11
13. Medium · 4.3 URL Shortify <= 1.5.0 - Cross-Site Request Forgery ↗
    2021-10-28 CVE-2021-24749 Cross-Site Request Forgery (CSRF) Affects <= 1.5.0 Patched in 1.5.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 7 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-05-19 9K+ → 10K+ up after 103 days in tier
2. 2023-02-05 8K+ → 9K+ up after 96 days in tier
3. 2022-11-01 7K+ → 8K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• LinkCentral – URL shortener, Affiliate Links & Custom Link Shortener with Link Tracking 400+ installs · 4.6★ · 3 shared tags A
• PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links 200K+ installs · 4.8★ · 2 shared tags A
• BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP 20K+ installs · 4.7★ · 2 shared tags A
• ShortLinks Pro – Affiliate Links, Link Shortening, Click Tracking & Marketing 100+ installs · 4.5★ · 2 shared tags A
• Royal Links – Affiliate Link Cloaking, Shortener & Tracker 10+ installs · 4.0★ · 2 shared tags B
• Linkit expiration links 10+ installs · 3.6★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for URL Shortify – Simple and Easy URL Shortener into a readme, a review or a deck. It updates itself.

URL Shortify – Simple and Easy URL Shortener: 10K+ active installs, 4.7★ (166 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/url-shortify